@aglyn/plugins-commerce 1.0.0-beta.143

package/src/lib/server/draft-order.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/draft-order.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport * as CommerceModel from '../model'\nimport { firebaseAdmin, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport { connectLinkageIsReady } from '@aglyn/tenant-data-admin/server/stripe-account-mode'\nimport { resolveManualTaxRateId } from './manual-tax-rate'\nimport {\n  type PromotionSlotHold,\n  holdPromotionSlot,\n  promotionHoldKey,\n} from './promotion-hold'\nimport {\n  buildRoute,\n  claimAttempt,\n  Route,\n  type AttemptClaim,\n  type PluginApiHandler,\n} from '@aglyn/aglyn/server'\n\n/**\n * Draft orders (AGL-287, Shopify parity): a manager builds an order in\n * the console and sends the buyer a payment link. Creates the order doc\n * (status `pending`, channel `draft`) with a sequential number, then a\n * Stripe Checkout session on the merchant's connected account whose\n * webhook completion flips the SAME doc to `paid`\n * (metadata type `commerce-draft`).\n */\nexport const draftOrderHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  if (!process.env.STRIPE_SECRET_KEY) {\n    return res.status(501).json({ error: 'Payments are not configured.' })\n  }\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n  const body =\n    typeof req.body === 'string' ? JSON.parse(req.body) : (req.body ?? {})\n  const hostId = String(body.hostId ?? '')\n  const productId = String(body.productId ?? '')\n  const variantId = String(body.variantId ?? '')\n  const quantity = Math.max(1, Math.min(99, Math.round(Number(body.quantity ?? 1))))\n  const email = String(body.email ?? '').trim()\n  // A code the MERCHANT types while composing the order (AGL-305). The\n  // storefront doors read this same field name, so one resolver answers it the\n  // same way whoever pressed the button.\n  const couponCode = String(body.couponCode ?? '').trim()\n  // One draft attempt, minted by the console dialog (AGL-1697). Node\n  // lowercases incoming headers, but read both spellings — the plugin API\n  // request type makes no promise about casing.\n  const idempotencyKey = String(\n    req.headers['idempotency-key'] ?? req.headers['Idempotency-Key'] ?? '',\n  ).trim().slice(0, 200)\n  if (!hostId || !productId) {\n    return res.status(400).json({ error: 'Missing hostId or productId' })\n  }\n\n  let claim: AttemptClaim | null = null\n  /**\n   * The redemption slot this attempt reserved (AGL-305), hoisted so every\n   * refusal below the claim — and the catch — can hand it back. A throw after\n   * the hold is placed is exactly the case where a slot would otherwise stand\n   * invisibly against the merchant's cap until its TTL lapsed, and this path\n   * rolls its order document back on two of those refusals already.\n   */\n  let discountSlot: PromotionSlotHold | null = null\n  let discountHoldKey = ''\n  const releaseDiscountSlot = async (): Promise<void> => {\n    const slot = discountSlot\n    discountSlot = null\n    discountHoldKey = ''\n    if (slot) await slot.release()\n  }\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown site' })\n    }\n    // AN ALLOWLIST (AGL-2262), matching `cancel-order.ts`, `fulfill-order.ts`\n    // and the Firestore rules, whose host-write predicate is\n    // `hostMemberRole(hostId) in ['admin','editor']`. The old\n    // `!role || role === 'viewer'` denylist caught the stranger but admitted\n    // every OTHER string — a legacy value, a typo, any role added later — on\n    // the one route that mints a live Stripe payment link. `HostAccessRole`\n    // has since grown an `author` (AGL-2334), which this allowlist refuses on\n    // purpose — an author edits content and does not mint payment links — and\n    // which the old denylist would have admitted. That is the allowlist form\n    // earning its keep on a union that changed under it.\n    const memberRole = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n    if (memberRole !== 'admin' && memberRole !== 'editor') {\n      return res.status(403).json({ error: 'Not permitted' })\n    }\n    const productSnapshot = await hostRef\n      .collection('products')\n      .doc(productId)\n      .get()\n    const raw = productSnapshot.data() as any\n    if (!raw || raw.deletedAt) {\n      return res.status(404).json({ error: 'Unknown product' })\n    }\n    const product = CommerceModel.liftLegacyProduct(raw)\n    const variant = variantId\n      ? product.variants.find((item) => item.id === variantId)\n      : product.variants[0]\n    if (!variant) return res.status(404).json({ error: 'Unknown variant' })\n    // A variant with no price yet (AGL-2916) cannot be invoiced: the link\n    // would ask for nothing, or for no amount at all.\n    if (!CommerceModel.variantHasPrice(variant)) {\n      return res.status(400).json({ error: `Set a price for ${product.name} before selling it.` })\n    }\n\n    // Merchant account like the storefront checkout (AGL-284).\n    const ownerOrg = await getOrgForHost(hostId)\n    // Plan gate, re-asked per request exactly as the storefront checkout\n    // asks it (AGL-1873, the AGL-481 pattern): a free or lapsed org must not\n    // keep minting payment links — at the free plan's 0% transaction fee —\n    // through the one commerce door that skipped the entitlement. Sits\n    // ABOVE the attempt claim with the other deterministic refusals, so it\n    // never burns the merchant's idempotency key.\n    if (!Aglyn.checkEntitlement(ownerOrg?.org as any, 'commerce')) {\n      return res.status(403).json({ error: 'Selling is not enabled' })\n    }\n    const ownerId = ownerOrg?.org?.ownerUid\n    const ownerProfile = ownerId\n      ? await firestore.collection('profiles').doc(String(ownerId)).get()\n      : null\n    const accountId = ownerProfile?.get('stripeAccountId')\n    if (\n      !connectLinkageIsReady(\n        {\n          accountId,\n          chargesEnabled: ownerProfile?.get('stripeChargesEnabled'),\n          accountLivemode: ownerProfile?.get('stripeAccountLivemode'),\n        },\n        { subject: `draft order host ${hostId}` },\n      )\n    ) {\n      return res.status(409).json({ error: 'Payments are not set up yet' })\n    }\n\n    // Stripe returns the merchant to the console Products page. This was\n    // `/{hostDocId}/products`, the pre-AGL-621/622 shape, so paying (or\n    // cancelling) a draft order landed on a 404 (AGL-685). Console products\n    // is the plugin route keyed by org slug + host SUBDOMAIN; server code\n    // cannot call useConsoleHostRoute, so resolve them here. Without both,\n    // fall back to the origin root rather than a fabricated dead path.\n    const consoleSubdomain = (\n      await firestore.collection('hostIndex').doc(hostId).get()\n    ).get('subdomain') as string | undefined\n    const consoleOrgSlug = ownerOrg?.org?.slug as string | undefined\n    const origin = req.headers.origin ?? `https://${req.headers.host}`\n    const consoleProductsUrl =\n      consoleOrgSlug && consoleSubdomain\n        ? `${origin}${buildRoute(Route.HOST_PLUGIN, {\n            orgSlug: consoleOrgSlug,\n            host: consoleSubdomain,\n            pluginSlug: 'products',\n          })}`\n        : origin\n\n    // WHAT THE COUNT SAYS, said out loud (AGL-2452).\n    //\n    // This handler contained no `canPurchase` and no `stockShortfall` — no\n    // reference to inventory of any kind. It is the door that mints a LIVE,\n    // payable Stripe link, and it would mint one for a sold-out variant whose\n    // merchant had chosen `oversellPolicy: 'deny'`, with the `commerce-draft`\n    // webhook branch then completing it into a `paid` order. `pos-order.ts`'s\n    // own comment asserts \"every storefront door gates on it\"; that claim was\n    // false for this one.\n    //\n    // WARN, NEVER BLOCK, matching the register (AGL-2357, the decision).\n    // Both of these are MERCHANT-initiated doors rather than shopper-initiated\n    // ones — the merchant may well be taking a deliberate pre-order or\n    // backorder — so a stale count must not refuse a sale the merchant means to\n    // make. What the merchant is entitled to is to be TOLD, which is the part\n    // that was missing entirely. The refusal variant is a separate decision and\n    // is not taken here.\n    //\n    // Computed from the SERVER's product document, and reported on the same\n    // `stockWarnings` key and in the same `StockShortfall` shape the register\n    // already returns, so one console surface can read either door.\n    const shortfall = CommerceModel.stockShortfall(\n      product,\n      variantId || product.variants[0]?.id,\n      quantity,\n    )\n    const stockWarnings: CommerceModel.StockShortfall[] = shortfall\n      ? [\n          {\n            productId,\n            ...(variantId ? { variantId } : {}),\n            name: product.name,\n            requested: quantity,\n            available: shortfall.available,\n          },\n        ]\n      : []\n\n    const unitAmountCents = Math.round(Number(variant.priceUsd) * 100)\n    const lineItems: CommerceModel.OrderLineItem[] = [\n      {\n        productId,\n        ...(variantId ? { variantId } : {}),\n        name: product.name,\n        ...(variant.sku ? { sku: variant.sku } : {}),\n        productType: product.type,\n        quantity,\n        unitAmountCents,\n      },\n    ]\n    const itemsCents = unitAmountCents * quantity\n    // THE DISCOUNTS HUB, ON THIS PATH TOO (AGL-305).\n    //\n    // `hosts/{hostId}/discounts` reached the cart and buy-now and stopped\n    // there, so a store running \"Summer sale, 10% off\" sold at 10% off through\n    // both storefront doors and at FULL price the moment the merchant invoiced\n    // the same buyer for the same goods through a payment link. No code has to\n    // be typed for that gap to open: an automatic promotion applies itself on\n    // the storefront and applied itself nowhere here, so the merchant's own\n    // payment link quietly undercut — and here overcharged against — their own\n    // advertised price.\n    //\n    // Resolved through the SAME `resolveDiscount` the other doors use, so one\n    // code cannot mean two amounts.\n    //\n    // RESOLVED BEFORE THE TAX BLOCK BELOW, and that ordering is the whole\n    // point rather than a convenience: the manual rate is computed against\n    // `chargedItemsCents`, so the discount lands BEFORE tax and the taxable\n    // base is the discounted one. It has to be — the session applies that same\n    // rate as `line_items[0][tax_rates][0]`, which Stripe evaluates against the\n    // line amount it actually charges. Reducing the line while taxing the list\n    // price would make our stored `taxCents` disagree with the tax Stripe\n    // collects, on every discounted draft.\n    const draftDiscountLines = [{ productId, amountCents: itemsCents }]\n    const hubDiscounts = await hostRef.collection('discounts').limit(100).get()\n    const resolvedDiscount = CommerceModel.resolveDiscount(\n      hubDiscounts.docs.map((docSnapshot) => ({\n        ...(docSnapshot.data() as CommerceModel.HostDiscount),\n        $id: docSnapshot.id,\n      })),\n      {\n        ...(couponCode ? { code: couponCode } : {}),\n        subtotalCents: itemsCents,\n        productIds: [productId],\n        lines: draftDiscountLines,\n      },\n    )\n    // Above the claim and above the order write with every other deterministic\n    // refusal, so a merchant who fixes the code and presses Send again strands\n    // no `pending` draft and burns no key. A code that RESOLVES but confers\n    // nothing leaves through here too — `codeProblem` carries the benefit's own\n    // reason — which is what stops this door repeating the defect that charged\n    // full shipping on a free-shipping code.\n    if (resolvedDiscount?.codeProblem) {\n      return res.status(400).json({ error: resolvedDiscount.codeProblem })\n    }\n    const appliedDiscountId =\n      resolvedDiscount && resolvedDiscount.benefit.kind !== 'none'\n        ? resolvedDiscount.discountId\n        : ''\n    const discountCents = appliedDiscountId ? resolvedDiscount!.discountCents : 0\n    // Stripe's charge minimum is 50¢ — never price a payment link below it,\n    // the same floor buy-now applies.\n    const chargedItemsCents = discountCents\n      ? Math.max(50, itemsCents - discountCents)\n      : itemsCents\n    // What was ACTUALLY taken off, after that floor. The stored totals record\n    // this rather than the resolver's figure, so the parts sum to the total on\n    // a draft the floor moved.\n    const appliedDiscountCents = itemsCents - chargedItemsCents\n    // The fee and `totals` are both built BELOW the shipping plan (AGL-2152):\n    // Stripe's card cost rides the whole payment-link total, so neither can be\n    // known until the tax (AGL-1953) and the shipping options are.\n\n    // Shipping (AGL-1792), from the same settings document the two storefront\n    // paths read. This handler contained no `shipping` string at all: a\n    // merchant who configured zones and rates collected them on a cart\n    // (AGL-1707) and on buy-now (AGL-1720), and nothing when they invoiced the\n    // same buyer for the same parcel through a payment link. The session\n    // collected no address either, so the merchant was not even told where to\n    // send it — the webhook records one now that Stripe is asked for it.\n    //\n    // The premise AGL-1792 filed this under was that \"the destination IS known\n    // — the merchant typed it\". It is not: the draft dialog collects a product,\n    // a variant, a quantity and an email, and this handler reads exactly those.\n    // So the destination is as unknown here as it is in the cart, and the same\n    // asking machinery applies rather than none of it.\n    //\n    // CONDITIONAL on the product being physical, exactly as buy-now is: this\n    // dialog invoices downloads and consulting too, and charging that buyer\n    // postage would be worse than the bug. A missing `type` reads as physical,\n    // matching the fee ladder above — the two reads must not disagree about\n    // what a part-migrated doc is. The one-time condition buy-now also carries\n    // is structural here: this path only ever builds `mode: 'payment'`.\n    //\n    // RESOLVED BEFORE THE ORDER DOCUMENT, because the plan can refuse and the\n    // order is written before Stripe is called. Refusing after it would strand\n    // a `pending` draft on the merchant's orders list for every attempt —\n    // this path's version of the orphaned coupon AGL-1721 kept out of the cart.\n    const storeSettings = await hostRef\n      .collection('settings')\n      .doc('store')\n      .get()\n    const shippingSettings = storeSettings.get('shipping') as\n      CommerceModel.ShippingSettings | undefined\n\n    // Taxes (AGL-1953), from the same settings document. This handler had no\n    // tax code at all in either mode, so a merchant who invoiced a buyer for\n    // the same product they sell on the storefront charged them no tax — the\n    // cart's defect, one door over, and worse here because the merchant\n    // composed this order deliberately and would reasonably assume it matched\n    // their store.\n    //\n    // Origin-based, exactly as buy-now and the cart resolve it. The AGL-1792\n    // note above already established the premise: this dialog collects a\n    // product, a variant, a quantity and an email, so the DESTINATION is as\n    // unknown here as it is in the cart.\n    //\n    // Computed pure and BEFORE the claim so the stored totals can carry it;\n    // the Stripe object it needs is minted below the point of no return.\n    const taxSettings = (storeSettings.get('tax') ?? {}) as CommerceModel.TaxSettings\n    // AGL-1999: an unset tax mode is NOT a decision, and it must not sell.\n    // `mode` was `undefined` for every store whose owner never opened the\n    // Taxes card — the default state of every new storefront — and each\n    // branch below tested for a specific string, so no branch was taken, no\n    // tax was computed, and the shopper was charged an untaxed total. See\n    // `commerce-tax-decision.ts` for why refusing beats defaulting to either\n    // mode. `mode: 'none'` is the explicit opt-out and passes straight\n    // through.\n    const taxDecision = CommerceModel.storefrontTaxDecision({\n      settings: taxSettings,\n      taxExempt: product.taxExempt,\n    })\n    if (taxDecision.kind === 'undecided') {\n      return res\n        .status(409)\n        .json({ error: CommerceModel.STOREFRONT_TAX_UNDECIDED_MESSAGE })\n    }\n    const taxMisconfigured =\n      CommerceModel.storefrontTaxMisconfiguration(taxSettings)\n    if (taxMisconfigured) {\n      // AGL-2145: the merchant DECIDED to collect and the sale would have\n      // charged zero anyway — an unfinished settings card, not a\n      // jurisdiction miss. Refused in the same words and the same place as\n      // the undecided case above.\n      return res.status(409).json({ error: taxMisconfigured })\n    }\n    const useStripeTax = taxDecision.kind === 'stripe-automatic'\n    const manualRate =\n      taxDecision.kind === 'manual' &&\n      !taxSettings.pricesIncludeTax\n        ? CommerceModel.resolveTaxRate(taxSettings, taxSettings.origin ?? {})\n        : null\n    // THE DISCOUNTED BASE (AGL-305). `chargedItemsCents` is what the line\n    // will actually be worth, and the session applies this same rate to that\n    // line as a Stripe Tax Rate — so taxing `itemsCents` here would record a\n    // figure Stripe never charges.\n    const taxCents = manualRate\n      ? CommerceModel.computeTaxCents(chargedItemsCents, manualRate.pct)\n      : 0\n    // Stripe Tax mode leaves this 0 at composition time and the webhook folds\n    // the computed figure in — the same additive shape AGL-1792 used for\n    // shipping, and for the same reason: only Stripe knows it.\n    const shippingPlan =\n      (product.type ?? 'physical') === 'physical'\n        ? CommerceModel.planCheckoutShipping(\n            shippingSettings,\n            {\n              subtotalCents: itemsCents,\n              totalGrams:\n                Math.max(0, Number(variant.weightGrams ?? 0)) * quantity,\n            },\n            body.shippingCountry,\n          )\n        : { countries: CommerceModel.CHECKOUT_SHIPPING_COUNTRIES, options: [] }\n    if (shippingPlan.refusal === 'destination-required') {\n      return res.status(400).json({\n        error: 'Choose where this order ships to.',\n        needsShippingCountry: true,\n        shippingCountries: [...CommerceModel.CHECKOUT_SHIPPING_COUNTRIES],\n      })\n    }\n    if (shippingPlan.refusal === 'destination-unserved') {\n      const declared = CommerceModel.normalizeCheckoutShippingCountry(\n        body.shippingCountry,\n      )\n      return res.status(409).json({\n        error: `This store does not ship to ${\n          CommerceModel.CHECKOUT_SHIPPING_COUNTRY_NAMES[declared as string] ??\n          'that country'\n        }.`,\n        needsShippingCountry: true,\n        shippingCountries: [...CommerceModel.CHECKOUT_SHIPPING_COUNTRIES],\n      })\n    }\n    // No rate of the merchant's reaches this order (AGL-2232). Above the\n    // order write and the payment link, like every other refusal here, so a\n    // manager who fixes the tier table and presses Send again strands nothing.\n    if (shippingPlan.refusal === 'cart-unpriceable') {\n      return res\n        .status(409)\n        .json({ error: CommerceModel.CART_UNPRICEABLE_SHIPPING_MESSAGE })\n    }\n    // FREE SHIPPING IS A ZEROED RATE, NOT A REDUCTION (AGL-305), the same\n    // construction the cart uses and for the same reason: nothing has picked a\n    // rate yet, so there is no amount to take off. The buyer chooses after the\n    // link is minted, so the only exact answer is to offer every rate at zero.\n    //\n    // Every rate rather than the cheapest, because `free_shipping` carries no\n    // field naming one — and zeroing them all keeps the fee, the transfer floor\n    // and the ceiling below honest, since all three read these same options.\n    //\n    // Derived from `shippingPlan.options` and read EVERYWHERE below in its\n    // place; a reader that reached past this to `shippingPlan.options` would\n    // price carriage the buyer is not being charged for.\n    const shippingOptions =\n      resolvedDiscount?.freeShipping === true\n        ? shippingPlan.options.map((option) => ({ ...option, amountCents: 0 }))\n        : shippingPlan.options\n\n    // THE PLATFORM FEE (AGL-2152) — the advertised take PLUS Stripe's card\n    // cost, passed through at cost. A payment link is a destination charge, so\n    // Stripe debits 2.9% + 30¢ from the PLATFORM's balance; the old take-only\n    // figure meant every tier carrying a 0% rate invoiced a buyer at a loss to\n    // Aglyn, and Starter's 2% is below 2.9% so it lost money at every size too.\n    //\n    // `?? 'physical'` (AGL-2251), matching `checkout.ts` and the cart. Without\n    // it a product doc carrying no `type` fell to `resolveTransactionFeePct`'s\n    // digital branch, so a merchant's payment link took a different cut of the\n    // same product than their storefront did.\n    //\n    // The base is the whole card total: the goods, the manual tax line, and the DEAREST shipping\n    // option the link offers (the buyer picks after the link is minted and\n    // `application_fee_amount` is fixed at creation, so reaching for the\n    // cheapest would put the difference back on Aglyn). A store on Stripe Tax\n    // is the one residual — that tax is computed inside Stripe afterwards.\n    const shippingCeilingCents = shippingOptions.reduce(\n      (most, option) =>\n        Math.max(most, Math.max(0, Number(option.amountCents ?? 0))),\n      0,\n    )\n    // Both bases are the DISCOUNTED goods (AGL-305). The platform take is a\n    // cut of what the merchant actually sells for, and Stripe's card cost is\n    // passed through on what the card actually runs for — reading `itemsCents`\n    // here would invoice the merchant a fee on money nobody paid.\n    const feeCents = Aglyn.resolveTransactionFeeCents(\n      ownerOrg?.org as any,\n      product.type ?? 'physical',\n      chargedItemsCents,\n      chargedItemsCents + taxCents + shippingCeilingCents,\n    )\n    // Stripe Tax mode leaves the tax 0 at composition time and the webhook\n    // folds the computed figure in — the same additive shape AGL-1792 used for\n    // shipping, and for the same reason: only Stripe knows it.\n    const totals = CommerceModel.computeOrderTotals(lineItems, {\n      feeCents,\n      taxCents,\n      // The line item still carries the LIST price, so the discount has to be\n      // a named part of the totals or `itemsCents - discountCents + tax` would\n      // not be the number on the payment link.\n      discountCents: appliedDiscountCents,\n    })\n\n    // THE LINK CHARGES `chargedItemsCents`, EXACTLY (the AGL-2159 construction,\n    // reused here because this path grew the same problem the moment it grew a\n    // discount).\n    //\n    // A Stripe line is `quantity` units at ONE integer `unit_amount`, so it can\n    // only express totals divisible by `quantity` — and a percentage discount\n    // does not respect that. Dividing and multiplying back misses the intended\n    // total by up to `quantity / 2` cents in either direction, which on this\n    // path is worse than on buy-now: the frozen `totals` above are written to\n    // the order document BEFORE the session is minted, so a link that charged\n    // a different number would leave the merchant's own books disagreeing with\n    // what their buyer paid, permanently and silently.\n    //\n    // So when the total does not divide evenly, the line becomes ONE unit at\n    // the exact total with the count moved into the display name. The real\n    // quantity is carried by the order document's line item, which is\n    // untouched, so nothing downstream can tell the difference.\n    //\n    // The even case — every undiscounted draft, and most discounted ones —\n    // keeps the per-unit shape byte for byte.\n    const evenUnitAmountCents = Math.floor(chargedItemsCents / quantity)\n    const remainderCents = chargedItemsCents - evenUnitAmountCents * quantity\n    const chargedQuantity = remainderCents === 0 ? quantity : 1\n    const chargedUnitAmountCents =\n      remainderCents === 0 ? evenUnitAmountCents : chargedItemsCents\n    const chargedLineName = `${product.name}${\n      remainderCents === 0 ? '' : ` × ${quantity}`\n    }`.slice(0, 120)\n\n    // Point of no return (AGL-1697): everything past here writes an order and\n    // mints a live payment link. Every deterministic refusal — unknown\n    // product, payments not set up, the shipping-destination ask — sits above\n    // this line, so none of them burns the key: the merchant fixes the input\n    // and presses the same button. Before the claim, a double-submit minted a\n    // SECOND order doc, burned a second sequential number, and returned two\n    // live payment links bound to different orders, both payable.\n    const claimed = await claimAttempt(firestore, {\n      kind: 'commerce-draft',\n      scopeId: hostId,\n      orgId: String(ownerOrg?.org?.id ?? ''),\n      key: idempotencyKey,\n      busyMessage: 'This draft order is already being created',\n    })\n    if ('replay' in claimed) {\n      return res.status(claimed.replay.status).json(claimed.replay.body)\n    }\n    claim = claimed.claim\n\n    // THE REDEMPTION SLOT IS RESERVED HERE (AGL-305), on the same terms the\n    // storefront doors reserve it.\n    //\n    // A payment link lives until the buyer pays it, so between this handler and\n    // the `commerce-draft` webhook branch that settles the slot there is a\n    // window measured in days — far wider than a Checkout Session's. Reading\n    // `redemptions` and hoping would let a merchant mint ten links against a\n    // cap of one and have all ten pay.\n    //\n    // BELOW the claim because the hold is keyed by the attempt: a retry of one\n    // attempt must be able to re-claim the slot it already holds rather than be\n    // refused by it. An uncapped promotion writes nothing and returns an empty\n    // `holdKey`, which is what tells the webhook to fall back to the plain\n    // increment.\n    if (appliedDiscountId) {\n      const slot = await holdPromotionSlot({\n        firestore,\n        ref: hostRef.collection('discounts').doc(appliedDiscountId),\n        holdKey: promotionHoldKey(claimed.claim.stripeKey),\n        label: `draft discount ${appliedDiscountId}`,\n      })\n      if (!slot.ok) {\n        // Refused rather than quietly repriced, and that is deliberate for the\n        // AUTOMATIC case too: the merchant composed this order at a price the\n        // promotion was part of, and minting the link at full price would\n        // invoice their buyer more than the store advertises without saying so.\n        // Nothing has been written yet, so the key goes back and the retry\n        // prices correctly — `resolveDiscount` counts live holds and simply\n        // stops offering an exhausted promotion.\n        await claim.release()\n        return res.status(409).json({\n          error:\n            couponCode && resolvedDiscount?.discount.code\n              ? CommerceModel.PROMOTION_EXHAUSTED_MESSAGE\n              : CommerceModel.PROMOTION_UNAVAILABLE_MESSAGE,\n        })\n      }\n      if (slot.holdKey) {\n        discountSlot = slot\n        discountHoldKey = slot.holdKey\n      }\n    }\n\n    // Order doc first (transactional number), then the payment link.\n    const orderRef = hostRef.collection('orders').doc()\n    const counterRef = hostRef.collection('counters').doc('orders')\n    await firestore.runTransaction(async (transaction) => {\n      const counter = await transaction.get(counterRef)\n      const number = Number(counter.get('next') ?? 1)\n      transaction.set(counterRef, { next: number + 1 }, { merge: true })\n      transaction.set(orderRef, {\n        number,\n        status: 'pending',\n        channel: 'draft',\n        lineItems,\n        totals,\n        // WHICH TAX REGIME THIS ORDER IS COMPOSED UNDER (AGL-2451), from the\n        // decision taken above rather than from the frozen `taxCents` — a\n        // Stripe Tax draft freezes 0 there and only the paid session knows the\n        // figure, so a mode read back off the amount would call it `none`.\n        //\n        // Stamped at composition so a draft that is never paid still says what\n        // it was priced under, and RESTATED by the `commerce-draft` webhook\n        // branch from the session that actually charged it. The webhook's is\n        // authoritative — it has Stripe's computed tax in hand — and for a\n        // manual draft the two agree by construction.\n        taxMode: CommerceModel.storefrontTaxModeForDecision(\n          taxDecision,\n          taxCents,\n        ),\n        customerEmail: email || null,\n        timeline: [\n          {\n            atMs: Date.now(),\n            event: 'draft',\n            detail: `Draft created by ${decoded.email ?? decoded.uid}`,\n          },\n        ],\n        createdAtMs: Date.now(),\n        createdAt: firebaseAdmin.firestore.FieldValue.serverTimestamp(),\n      })\n    })\n\n    // The tax rate is minted here, BELOW the claim, because it creates a real\n    // Stripe object (AGL-1953). Cached per host, so it is usually a read.\n    let draftTaxRateId = ''\n    if (taxCents > 0 && manualRate) {\n      draftTaxRateId =\n        (await resolveManualTaxRateId({\n          hostRef,\n          taxPct: manualRate.pct,\n          taxLabel: manualRate.label || `Tax (${manualRate.pct}%)`,\n          ...(claim.stripeKey\n            ? { headers: { 'Idempotency-Key': `${claim.stripeKey}-tax-rate` } }\n            : {}),\n        })) ?? ''\n      if (!draftTaxRateId) {\n        // A VISIBLE refusal rather than an untaxed payment link — the silent\n        // under-collection is the defect. The order doc is rolled back the\n        // same way the session failure below rolls it back.\n        await orderRef.delete().catch(() => undefined)\n        await releaseDiscountSlot()\n        await claim.release()\n        return res.status(502).json({ error: 'Payment link creation failed' })\n      }\n    }\n    const params = new URLSearchParams({\n      mode: 'payment',\n      ...(useStripeTax ? { 'automatic_tax[enabled]': 'true' } : {}),\n      ...(draftTaxRateId ? { 'line_items[0][tax_rates][0]': draftTaxRateId } : {}),\n      'line_items[0][quantity]': String(chargedQuantity),\n      'line_items[0][price_data][currency]': 'usd',\n      'line_items[0][price_data][unit_amount]': String(chargedUnitAmountCents),\n      'line_items[0][price_data][product_data][name]': chargedLineName,\n      // THE CONNECT SPLIT (AGL-1956). A Stripe Tax payment link computes its\n      // tax against AGLYN's registrations and Aglyn remits it (AGL-1904), so\n      // the merchant gets a FIXED `transfer_data[amount]` and no\n      // `application_fee_amount`: the fee form transfers `amount_total − fee`,\n      // and `amount_total` includes that tax. A manual-rate or untaxed link is\n      // unchanged. See `commerce-connect-transfer.ts`.\n      ...CommerceModel.destinationChargeParams({\n        accountId: String(accountId),\n        feeCents,\n        taxOwner: useStripeTax ? 'platform' : 'merchant',\n        // The DISCOUNTED goods (AGL-305): this is what the merchant is\n        // transferred, and paying out the list price on a discounted link\n        // would move money Stripe never collected.\n        merchantGoodsCents: chargedItemsCents,\n        shippingFloorCents: CommerceModel.shippingFloorCents(shippingOptions),\n      }),\n      ...(email ? { customer_email: email } : {}),\n      success_url: `${consoleProductsUrl}?draft=paid`,\n      cancel_url: `${consoleProductsUrl}?draft=canceled`,\n      'metadata[type]': 'commerce-draft',\n      'metadata[hostId]': hostId,\n      'metadata[orderId]': orderRef.id,\n      'metadata[productId]': productId,\n      ...(variantId ? { 'metadata[variantId]': variantId } : {}),\n      'metadata[feeCents]': String(feeCents),\n      // WHAT THE WEBHOOK SETTLES (AGL-305), in the field names the\n      // `checkout.session.completed` branch already reads for the cart. The\n      // hold key's ABSENCE is what tells it to fall back to the unconditional\n      // increment, which is right for an uncapped promotion.\n      ...(appliedDiscountId\n        ? { 'metadata[discountId]': appliedDiscountId }\n        : {}),\n      ...(discountHoldKey ? { 'metadata[discountHoldKey]': discountHoldKey } : {}),\n      // See the AGL-1956 note in `checkout.ts` — recorded only on the shape\n      // where the merchant's payout is no longer the whole charge.\n      ...(useStripeTax\n        ? {\n            'metadata[transferCents]': String(\n              CommerceModel.platformLiableTransferCents({\n                feeCents,\n                merchantGoodsCents: chargedItemsCents,\n                shippingFloorCents:\n                  CommerceModel.shippingFloorCents(shippingOptions),\n              }),\n            ),\n            'metadata[transferShippingCents]': String(\n              CommerceModel.shippingFloorCents(shippingOptions),\n            ),\n          }\n        : {}),\n    })\n    // Both keys or neither (AGL-1720's rule, inherited). Stripe will not apply\n    // a shipping rate without an address to ship to, and a merchant who\n    // configured nothing plans to no options and so gets neither — a payment\n    // link byte-identical to the one this handler built before shipping\n    // existed on it.\n    if (shippingOptions.length > 0) {\n      CommerceModel.appendShippingAddressCollectionParams(\n        params,\n        shippingPlan.countries,\n      )\n      CommerceModel.appendCheckoutShippingParams(params, shippingOptions)\n    }\n    const response = await fetch(\n      'https://api.stripe.com/v1/checkout/sessions',\n      {\n        method: 'POST',\n        headers: {\n          Authorization: `Bearer ${process.env.STRIPE_SECRET_KEY}`,\n          'Content-Type': 'application/x-www-form-urlencoded',\n          // The half that is a live payment link (AGL-1697). Stripe replays\n          // the existing session for a repeated key instead of opening a\n          // second one on the merchant's account, which covers the window\n          // where our claim is written but the response never arrives.\n          ...(claim.stripeKey ? { 'Idempotency-Key': claim.stripeKey } : {}),\n        },\n        body: params.toString(),\n      },\n    )\n    const session = (await response.json()) as {\n      url?: string\n      id?: string\n      error?: any\n    }\n    if (!response.ok || !session.url) {\n      console.error('Stripe draft-order error', session.error)\n      await orderRef.delete().catch(() => undefined)\n      // The draft did not happen — hand the key back rather than locking this\n      // dialog out over one flaky moment. The retry re-derives the SAME\n      // digest, so if Stripe did create the session it replays it.\n      await releaseDiscountSlot()\n      await claim.release()\n      return res.status(502).json({ error: 'Payment link creation failed' })\n    }\n    await orderRef.set(\n      { checkoutSessionId: session.id, paymentLinkUrl: session.url },\n      { merge: true },\n    )\n    // Spread on the same terms as the register's: present only when there is\n    // something to say, so a caller can test the key rather than a length.\n    const payload = {\n      orderId: orderRef.id,\n      url: session.url,\n      ...(stockWarnings.length > 0 ? { stockWarnings } : {}),\n    }\n    await claim.record(200, payload)\n    return res.status(200).json(payload)\n  } catch (error) {\n    console.error(error)\n    // Release on the way out so a transient failure does not strand the key\n    // (AGL-1691's rule). The order write may or may not have landed; the\n    // merchant reconciles from the orders list, the same position they were\n    // in before this endpoint had a claim at all. The redemption slot goes\n    // back for the same reason — a throw is the one path that would otherwise\n    // leave it standing against the cap until its TTL lapsed.\n    await releaseDiscountSlot()\n    await claim?.release()\n    return res.status(500).json({ error: 'Draft order failed' })\n  }\n}\n"],"names":["Aglyn","CommerceModel","firebaseAdmin","getOrgForHost","connectLinkageIsReady","resolveManualTaxRateId","holdPromotionSlot","promotionHoldKey","buildRoute","claimAttempt","Route","draftOrderHandler","req","res","body","method","status","json","error","process","env","STRIPE_SECRET_KEY","authorization","String","headers","idToken","startsWith","slice","length","undefined","JSON","parse","hostId","productId","variantId","quantity","Math","max","min","round","Number","email","trim","couponCode","idempotencyKey","claim","discountSlot","discountHoldKey","releaseDiscountSlot","slot","release","hostSnapshot","storeSettings","taxSettings","product","variant","ownerOrg","decoded","app","auth","verifyIdToken","firestore","hostRef","collection","doc","get","exists","memberRole","uid","productSnapshot","raw","data","deletedAt","liftLegacyProduct","variants","find","item","id","variantHasPrice","name","checkEntitlement","org","ownerId","ownerUid","ownerProfile","accountId","chargesEnabled","accountLivemode","subject","consoleSubdomain","consoleOrgSlug","slug","origin","host","consoleProductsUrl","HOST_PLUGIN","orgSlug","pluginSlug","shortfall","stockShortfall","stockWarnings","requested","available","unitAmountCents","priceUsd","lineItems","sku","productType","type","itemsCents","draftDiscountLines","amountCents","hubDiscounts","limit","resolvedDiscount","resolveDiscount","docs","map","docSnapshot","$id","code","subtotalCents","productIds","lines","codeProblem","appliedDiscountId","benefit","kind","discountId","discountCents","chargedItemsCents","appliedDiscountCents","shippingSettings","taxDecision","storefrontTaxDecision","settings","taxExempt","STOREFRONT_TAX_UNDECIDED_MESSAGE","taxMisconfigured","storefrontTaxMisconfiguration","useStripeTax","manualRate","pricesIncludeTax","resolveTaxRate","taxCents","computeTaxCents","pct","shippingPlan","planCheckoutShipping","totalGrams","weightGrams","shippingCountry","countries","CHECKOUT_SHIPPING_COUNTRIES","options","refusal","needsShippingCountry","shippingCountries","declared","normalizeCheckoutShippingCountry","CHECKOUT_SHIPPING_COUNTRY_NAMES","CART_UNPRICEABLE_SHIPPING_MESSAGE","shippingOptions","freeShipping","option","shippingCeilingCents","reduce","most","feeCents","resolveTransactionFeeCents","totals","computeOrderTotals","evenUnitAmountCents","floor","remainderCents","chargedQuantity","chargedUnitAmountCents","chargedLineName","claimed","scopeId","orgId","key","busyMessage","replay","ref","holdKey","stripeKey","label","ok","discount","PROMOTION_EXHAUSTED_MESSAGE","PROMOTION_UNAVAILABLE_MESSAGE","orderRef","counterRef","runTransaction","transaction","counter","number","set","next","merge","channel","taxMode","storefrontTaxModeForDecision","customerEmail","timeline","atMs","Date","now","event","detail","createdAtMs","createdAt","FieldValue","serverTimestamp","draftTaxRateId","taxPct","taxLabel","delete","catch","params","URLSearchParams","mode","destinationChargeParams","taxOwner","merchantGoodsCents","shippingFloorCents","customer_email","success_url","cancel_url","platformLiableTransferCents","appendShippingAddressCollectionParams","appendCheckoutShippingParams","response","fetch","Authorization","toString","session","url","console","checkoutSessionId","paymentLinkUrl","payload","orderId","record"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,sBAAqB;AAC5C,YAAYC,mBAAmB,oBAAU;AACzC,SAASC,aAAa,EAAEC,aAAa,QAAQ,2BAA0B;AACvE,SAASC,qBAAqB,QAAQ,sDAAqD;AAC3F,SAASC,sBAAsB,QAAQ,uBAAmB;AAC1D,SAEEC,iBAAiB,EACjBC,gBAAgB,QACX,sBAAkB;AACzB,SACEC,UAAU,EACVC,YAAY,EACZC,KAAK,QAGA,sBAAqB;AAE5B;;;;;;;CAOC,GACD,OAAO,MAAMC,oBAAsC,OAAOC,KAAKC;QAOhCD,4BAM4BA,WACnCE,cACGA,iBACAA,iBACmCA,gBACvCA,aAIKA,kBAKxBF,MAAAA;IA1BF,IAAIA,IAAIG,MAAM,KAAK,QAAQ;QACzB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,IAAI,CAACC,QAAQC,GAAG,CAACC,iBAAiB,EAAE;QAClC,OAAOR,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA+B;IACtE;IACA,MAAMI,gBAAgBC,QAAOX,6BAAAA,IAAIY,OAAO,CAACF,aAAa,YAAzBV,6BAA6B;IAC1D,MAAMa,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAOZ,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAkB;IACrE,MAAMJ,OACJ,OAAOF,IAAIE,IAAI,KAAK,WAAWgB,KAAKC,KAAK,CAACnB,IAAIE,IAAI,KAAKF,YAAAA,IAAIE,IAAI,YAARF,YAAY,CAAC;IACtE,MAAMoB,SAAST,QAAOT,eAAAA,KAAKkB,MAAM,YAAXlB,eAAe;IACrC,MAAMmB,YAAYV,QAAOT,kBAAAA,KAAKmB,SAAS,YAAdnB,kBAAkB;IAC3C,MAAMoB,YAAYX,QAAOT,kBAAAA,KAAKoB,SAAS,YAAdpB,kBAAkB;IAC3C,MAAMqB,WAAWC,KAAKC,GAAG,CAAC,GAAGD,KAAKE,GAAG,CAAC,IAAIF,KAAKG,KAAK,CAACC,QAAO1B,iBAAAA,KAAKqB,QAAQ,YAAbrB,iBAAiB;IAC7E,MAAM2B,QAAQlB,QAAOT,cAAAA,KAAK2B,KAAK,YAAV3B,cAAc,IAAI4B,IAAI;IAC3C,qEAAqE;IACrE,6EAA6E;IAC7E,uCAAuC;IACvC,MAAMC,aAAapB,QAAOT,mBAAAA,KAAK6B,UAAU,YAAf7B,mBAAmB,IAAI4B,IAAI;IACrD,mEAAmE;IACnE,wEAAwE;IACxE,8CAA8C;IAC9C,MAAME,iBAAiBrB,QACrBX,QAAAA,8BAAAA,IAAIY,OAAO,CAAC,kBAAkB,YAA9BZ,8BAAkCA,IAAIY,OAAO,CAAC,kBAAkB,YAAhEZ,OAAoE,IACpE8B,IAAI,GAAGf,KAAK,CAAC,GAAG;IAClB,IAAI,CAACK,UAAU,CAACC,WAAW;QACzB,OAAOpB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA8B;IACrE;IAEA,IAAI2B,QAA6B;IACjC;;;;;;GAMC,GACD,IAAIC,eAAyC;IAC7C,IAAIC,kBAAkB;IACtB,MAAMC,sBAAsB;QAC1B,MAAMC,OAAOH;QACbA,eAAe;QACfC,kBAAkB;QAClB,IAAIE,MAAM,MAAMA,KAAKC,OAAO;IAC9B;IACA,IAAI;YAkBkBC,mBA8DLvC,qBA0KMwC,oBA+B2BC,qBAa7CC,eAM4BC,sBA6E7BD;YArUcE,eA2BOA,gBAkCRF,oBA+TCE;QA/ahB,MAAMC,UAAU,MAAMvD,cAAcwD,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACnC;QAC/D,MAAMoC,YAAY3D,cAAcwD,GAAG,GAAGG,SAAS;QAC/C,MAAMC,UAAUD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAAChC;QAClD,MAAMmB,eAAe,MAAMW,QAAQG,GAAG;QACtC,IAAI,CAACd,aAAae,MAAM,EAAE;YACxB,OAAOrD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;QACtD;QACA,0EAA0E;QAC1E,yDAAyD;QACzD,0DAA0D;QAC1D,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,qDAAqD;QACrD,MAAMiD,aAAa,EAAChB,oBAAAA,aAAac,GAAG,CAAC,0BAAjBd,oBAAmC,CAAC,EAAE,CAACM,QAAQW,GAAG,CAAC;QACvE,IAAID,eAAe,WAAWA,eAAe,UAAU;YACrD,OAAOtD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAgB;QACvD;QACA,MAAMmD,kBAAkB,MAAMP,QAC3BC,UAAU,CAAC,YACXC,GAAG,CAAC/B,WACJgC,GAAG;QACN,MAAMK,MAAMD,gBAAgBE,IAAI;QAChC,IAAI,CAACD,OAAOA,IAAIE,SAAS,EAAE;YACzB,OAAO3D,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkB;QACzD;QACA,MAAMoC,UAAUrD,cAAcwE,iBAAiB,CAACH;QAChD,MAAMf,UAAUrB,YACZoB,QAAQoB,QAAQ,CAACC,IAAI,CAAC,CAACC,OAASA,KAAKC,EAAE,KAAK3C,aAC5CoB,QAAQoB,QAAQ,CAAC,EAAE;QACvB,IAAI,CAACnB,SAAS,OAAO1C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAkB;QACrE,sEAAsE;QACtE,kDAAkD;QAClD,IAAI,CAACjB,cAAc6E,eAAe,CAACvB,UAAU;YAC3C,OAAO1C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO,CAAC,gBAAgB,EAAEoC,QAAQyB,IAAI,CAAC,mBAAmB,CAAC;YAAC;QAC5F;QAEA,2DAA2D;QAC3D,MAAMvB,WAAW,MAAMrD,cAAc6B;QACrC,qEAAqE;QACrE,yEAAyE;QACzE,uEAAuE;QACvE,mEAAmE;QACnE,uEAAuE;QACvE,8CAA8C;QAC9C,IAAI,CAAChC,MAAMgF,gBAAgB,CAACxB,4BAAAA,SAAUyB,GAAG,EAAS,aAAa;YAC7D,OAAOpE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAyB;QAChE;QACA,MAAMgE,UAAU1B,6BAAAA,gBAAAA,SAAUyB,GAAG,qBAAbzB,cAAe2B,QAAQ;QACvC,MAAMC,eAAeF,UACjB,MAAMrB,UAAUE,UAAU,CAAC,YAAYC,GAAG,CAACzC,OAAO2D,UAAUjB,GAAG,KAC/D;QACJ,MAAMoB,YAAYD,gCAAAA,aAAcnB,GAAG,CAAC;QACpC,IACE,CAAC7D,sBACC;YACEiF;YACAC,cAAc,EAAEF,gCAAAA,aAAcnB,GAAG,CAAC;YAClCsB,eAAe,EAAEH,gCAAAA,aAAcnB,GAAG,CAAC;QACrC,GACA;YAAEuB,SAAS,CAAC,iBAAiB,EAAExD,QAAQ;QAAC,IAE1C;YACA,OAAOnB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA8B;QACrE;QAEA,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,mEAAmE;QACnE,MAAMuE,mBAAmB,AACvB,CAAA,MAAM5B,UAAUE,UAAU,CAAC,aAAaC,GAAG,CAAChC,QAAQiC,GAAG,EAAC,EACxDA,GAAG,CAAC;QACN,MAAMyB,iBAAiBlC,6BAAAA,iBAAAA,SAAUyB,GAAG,qBAAbzB,eAAemC,IAAI;QAC1C,MAAMC,UAAShF,sBAAAA,IAAIY,OAAO,CAACoE,MAAM,YAAlBhF,sBAAsB,CAAC,QAAQ,EAAEA,IAAIY,OAAO,CAACqE,IAAI,EAAE;QAClE,MAAMC,qBACJJ,kBAAkBD,mBACd,GAAGG,SAASpF,WAAWE,MAAMqF,WAAW,EAAE;YACxCC,SAASN;YACTG,MAAMJ;YACNQ,YAAY;QACd,IAAI,GACJL;QAEN,iDAAiD;QACjD,EAAE;QACF,uEAAuE;QACvE,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,sBAAsB;QACtB,EAAE;QACF,qEAAqE;QACrE,2EAA2E;QAC3E,mEAAmE;QACnE,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,qBAAqB;QACrB,EAAE;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,gEAAgE;QAChE,MAAMM,YAAYjG,cAAckG,cAAc,CAC5C7C,SACApB,eAAaoB,qBAAAA,QAAQoB,QAAQ,CAAC,EAAE,qBAAnBpB,mBAAqBuB,EAAE,GACpC1C;QAEF,MAAMiE,gBAAgDF,YAClD;YACE;gBACEjE;eACIC,YAAY;gBAAEA;YAAU,IAAI,CAAC;gBACjC6C,MAAMzB,QAAQyB,IAAI;gBAClBsB,WAAWlE;gBACXmE,WAAWJ,UAAUI,SAAS;;SAEjC,GACD,EAAE;QAEN,MAAMC,kBAAkBnE,KAAKG,KAAK,CAACC,OAAOe,QAAQiD,QAAQ,IAAI;QAC9D,MAAMC,YAA2C;YAC/C;gBACExE;eACIC,YAAY;gBAAEA;YAAU,IAAI,CAAC;gBACjC6C,MAAMzB,QAAQyB,IAAI;eACdxB,QAAQmD,GAAG,GAAG;gBAAEA,KAAKnD,QAAQmD,GAAG;YAAC,IAAI,CAAC;gBAC1CC,aAAarD,QAAQsD,IAAI;gBACzBzE;gBACAoE;;SAEH;QACD,MAAMM,aAAaN,kBAAkBpE;QACrC,iDAAiD;QACjD,EAAE;QACF,sEAAsE;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,oBAAoB;QACpB,EAAE;QACF,0EAA0E;QAC1E,gCAAgC;QAChC,EAAE;QACF,sEAAsE;QACtE,uEAAuE;QACvE,wEAAwE;QACxE,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,sEAAsE;QACtE,uCAAuC;QACvC,MAAM2E,qBAAqB;YAAC;gBAAE7E;gBAAW8E,aAAaF;YAAW;SAAE;QACnE,MAAMG,eAAe,MAAMlD,QAAQC,UAAU,CAAC,aAAakD,KAAK,CAAC,KAAKhD,GAAG;QACzE,MAAMiD,mBAAmBjH,cAAckH,eAAe,CACpDH,aAAaI,IAAI,CAACC,GAAG,CAAC,CAACC,cAAiB,aAClCA,YAAY/C,IAAI;gBACpBgD,KAAKD,YAAYzC,EAAE;iBAErB,aACMlC,aAAa;YAAE6E,MAAM7E;QAAW,IAAI,CAAC;YACzC8E,eAAeZ;YACfa,YAAY;gBAACzF;aAAU;YACvB0F,OAAOb;;QAGX,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,4EAA4E;QAC5E,2EAA2E;QAC3E,yCAAyC;QACzC,IAAII,oCAAAA,iBAAkBU,WAAW,EAAE;YACjC,OAAO/G,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOgG,iBAAiBU,WAAW;YAAC;QACpE;QACA,MAAMC,oBACJX,oBAAoBA,iBAAiBY,OAAO,CAACC,IAAI,KAAK,SAClDb,iBAAiBc,UAAU,GAC3B;QACN,MAAMC,gBAAgBJ,oBAAoBX,iBAAkBe,aAAa,GAAG;QAC5E,wEAAwE;QACxE,kCAAkC;QAClC,MAAMC,oBAAoBD,gBACtB7F,KAAKC,GAAG,CAAC,IAAIwE,aAAaoB,iBAC1BpB;QACJ,0EAA0E;QAC1E,2EAA2E;QAC3E,2BAA2B;QAC3B,MAAMsB,uBAAuBtB,aAAaqB;QAC1C,0EAA0E;QAC1E,2EAA2E;QAC3E,+DAA+D;QAE/D,0EAA0E;QAC1E,oEAAoE;QACpE,mEAAmE;QACnE,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,qEAAqE;QACrE,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,2EAA2E;QAC3E,mDAAmD;QACnD,EAAE;QACF,yEAAyE;QACzE,wEAAwE;QACxE,2EAA2E;QAC3E,wEAAwE;QACxE,2EAA2E;QAC3E,oEAAoE;QACpE,EAAE;QACF,0EAA0E;QAC1E,2EAA2E;QAC3E,sEAAsE;QACtE,4EAA4E;QAC5E,MAAM9E,gBAAgB,MAAMU,QACzBC,UAAU,CAAC,YACXC,GAAG,CAAC,SACJC,GAAG;QACN,MAAMmE,mBAAmBhF,cAAca,GAAG,CAAC;QAG3C,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,oEAAoE;QACpE,0EAA0E;QAC1E,eAAe;QACf,EAAE;QACF,yEAAyE;QACzE,qEAAqE;QACrE,wEAAwE;QACxE,qCAAqC;QACrC,EAAE;QACF,wEAAwE;QACxE,qEAAqE;QACrE,MAAMZ,eAAeD,qBAAAA,cAAca,GAAG,CAAC,kBAAlBb,qBAA4B,CAAC;QAClD,uEAAuE;QACvE,sEAAsE;QACtE,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,mEAAmE;QACnE,WAAW;QACX,MAAMiF,cAAcpI,cAAcqI,qBAAqB,CAAC;YACtDC,UAAUlF;YACVmF,WAAWlF,QAAQkF,SAAS;QAC9B;QACA,IAAIH,YAAYN,IAAI,KAAK,aAAa;YACpC,OAAOlH,IACJG,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAOjB,cAAcwI,gCAAgC;YAAC;QAClE;QACA,MAAMC,mBACJzI,cAAc0I,6BAA6B,CAACtF;QAC9C,IAAIqF,kBAAkB;YACpB,oEAAoE;YACpE,2DAA2D;YAC3D,qEAAqE;YACrE,4BAA4B;YAC5B,OAAO7H,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOwH;YAAiB;QACxD;QACA,MAAME,eAAeP,YAAYN,IAAI,KAAK;QAC1C,MAAMc,aACJR,YAAYN,IAAI,KAAK,YACrB,CAAC1E,YAAYyF,gBAAgB,GACzB7I,cAAc8I,cAAc,CAAC1F,cAAaA,sBAAAA,YAAYuC,MAAM,YAAlBvC,sBAAsB,CAAC,KACjE;QACN,sEAAsE;QACtE,yEAAyE;QACzE,yEAAyE;QACzE,+BAA+B;QAC/B,MAAM2F,WAAWH,aACb5I,cAAcgJ,eAAe,CAACf,mBAAmBW,WAAWK,GAAG,IAC/D;QACJ,0EAA0E;QAC1E,qEAAqE;QACrE,2DAA2D;QAC3D,MAAMC,eACJ,EAAC7F,gBAAAA,QAAQsD,IAAI,YAAZtD,gBAAgB,gBAAgB,aAC7BrD,cAAcmJ,oBAAoB,CAChChB,kBACA;YACEX,eAAeZ;YACfwC,YACEjH,KAAKC,GAAG,CAAC,GAAGG,QAAOe,uBAAAA,QAAQ+F,WAAW,YAAnB/F,uBAAuB,MAAMpB;QACpD,GACArB,KAAKyI,eAAe,IAEtB;YAAEC,WAAWvJ,cAAcwJ,2BAA2B;YAAEC,SAAS,EAAE;QAAC;QAC1E,IAAIP,aAAaQ,OAAO,KAAK,wBAAwB;YACnD,OAAO9I,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;gBACP0I,sBAAsB;gBACtBC,mBAAmB;uBAAI5J,cAAcwJ,2BAA2B;iBAAC;YACnE;QACF;QACA,IAAIN,aAAaQ,OAAO,KAAK,wBAAwB;gBAM/C1J;YALJ,MAAM6J,WAAW7J,cAAc8J,gCAAgC,CAC7DjJ,KAAKyI,eAAe;YAEtB,OAAO1I,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO,CAAC,4BAA4B,GAClCjB,0DAAAA,cAAc+J,+BAA+B,CAACF,SAAmB,YAAjE7J,0DACA,eACD,CAAC,CAAC;gBACH2J,sBAAsB;gBACtBC,mBAAmB;uBAAI5J,cAAcwJ,2BAA2B;iBAAC;YACnE;QACF;QACA,qEAAqE;QACrE,wEAAwE;QACxE,2EAA2E;QAC3E,IAAIN,aAAaQ,OAAO,KAAK,oBAAoB;YAC/C,OAAO9I,IACJG,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAOjB,cAAcgK,iCAAiC;YAAC;QACnE;QACA,sEAAsE;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,EAAE;QACF,0EAA0E;QAC1E,4EAA4E;QAC5E,yEAAyE;QACzE,EAAE;QACF,uEAAuE;QACvE,yEAAyE;QACzE,qDAAqD;QACrD,MAAMC,kBACJhD,CAAAA,oCAAAA,iBAAkBiD,YAAY,MAAK,OAC/BhB,aAAaO,OAAO,CAACrC,GAAG,CAAC,CAAC+C,SAAY,aAAKA;gBAAQrD,aAAa;kBAChEoC,aAAaO,OAAO;QAE1B,uEAAuE;QACvE,2EAA2E;QAC3E,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,EAAE;QACF,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,0CAA0C;QAC1C,EAAE;QACF,6FAA6F;QAC7F,uEAAuE;QACvE,qEAAqE;QACrE,0EAA0E;QAC1E,uEAAuE;QACvE,MAAMW,uBAAuBH,gBAAgBI,MAAM,CACjD,CAACC,MAAMH;gBAC6BA;mBAAlChI,KAAKC,GAAG,CAACkI,MAAMnI,KAAKC,GAAG,CAAC,GAAGG,QAAO4H,sBAAAA,OAAOrD,WAAW,YAAlBqD,sBAAsB;WAC1D;QAEF,wEAAwE;QACxE,yEAAyE;QACzE,2EAA2E;QAC3E,8DAA8D;QAC9D,MAAMI,WAAWxK,MAAMyK,0BAA0B,CAC/CjH,4BAAAA,SAAUyB,GAAG,GACb3B,iBAAAA,QAAQsD,IAAI,YAAZtD,iBAAgB,YAChB4E,mBACAA,oBAAoBc,WAAWqB;QAEjC,uEAAuE;QACvE,2EAA2E;QAC3E,2DAA2D;QAC3D,MAAMK,SAASzK,cAAc0K,kBAAkB,CAAClE,WAAW;YACzD+D;YACAxB;YACA,wEAAwE;YACxE,yEAAyE;YACzE,yCAAyC;YACzCf,eAAeE;QACjB;QAEA,4EAA4E;QAC5E,2EAA2E;QAC3E,aAAa;QACb,EAAE;QACF,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,mDAAmD;QACnD,EAAE;QACF,yEAAyE;QACzE,uEAAuE;QACvE,kEAAkE;QAClE,4DAA4D;QAC5D,EAAE;QACF,uEAAuE;QACvE,0CAA0C;QAC1C,MAAMyC,sBAAsBxI,KAAKyI,KAAK,CAAC3C,oBAAoB/F;QAC3D,MAAM2I,iBAAiB5C,oBAAoB0C,sBAAsBzI;QACjE,MAAM4I,kBAAkBD,mBAAmB,IAAI3I,WAAW;QAC1D,MAAM6I,yBACJF,mBAAmB,IAAIF,sBAAsB1C;QAC/C,MAAM+C,kBAAkB,GAAG3H,QAAQyB,IAAI,GACrC+F,mBAAmB,IAAI,KAAK,CAAC,GAAG,EAAE3I,UAAU,EAC5C,CAACR,KAAK,CAAC,GAAG;QAEZ,0EAA0E;QAC1E,mEAAmE;QACnE,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,8DAA8D;QAC9D,MAAMuJ,UAAU,MAAMzK,aAAaoD,WAAW;YAC5CkE,MAAM;YACNoD,SAASnJ;YACToJ,OAAO7J,gBAAOiC,6BAAAA,iBAAAA,SAAUyB,GAAG,qBAAbzB,eAAeqB,EAAE,oBAAI;YACnCwG,KAAKzI;YACL0I,aAAa;QACf;QACA,IAAI,YAAYJ,SAAS;YACvB,OAAOrK,IAAIG,MAAM,CAACkK,QAAQK,MAAM,CAACvK,MAAM,EAAEC,IAAI,CAACiK,QAAQK,MAAM,CAACzK,IAAI;QACnE;QACA+B,QAAQqI,QAAQrI,KAAK;QAErB,wEAAwE;QACxE,+BAA+B;QAC/B,EAAE;QACF,4EAA4E;QAC5E,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,mCAAmC;QACnC,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,uEAAuE;QACvE,aAAa;QACb,IAAIgF,mBAAmB;YACrB,MAAM5E,OAAO,MAAM3C,kBAAkB;gBACnCuD;gBACA2H,KAAK1H,QAAQC,UAAU,CAAC,aAAaC,GAAG,CAAC6D;gBACzC4D,SAASlL,iBAAiB2K,QAAQrI,KAAK,CAAC6I,SAAS;gBACjDC,OAAO,CAAC,eAAe,EAAE9D,mBAAmB;YAC9C;YACA,IAAI,CAAC5E,KAAK2I,EAAE,EAAE;gBACZ,uEAAuE;gBACvE,sEAAsE;gBACtE,kEAAkE;gBAClE,wEAAwE;gBACxE,mEAAmE;gBACnE,oEAAoE;gBACpE,yCAAyC;gBACzC,MAAM/I,MAAMK,OAAO;gBACnB,OAAOrC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAC1BC,OACEyB,eAAcuE,oCAAAA,iBAAkB2E,QAAQ,CAACrE,IAAI,IACzCvH,cAAc6L,2BAA2B,GACzC7L,cAAc8L,6BAA6B;gBACnD;YACF;YACA,IAAI9I,KAAKwI,OAAO,EAAE;gBAChB3I,eAAeG;gBACfF,kBAAkBE,KAAKwI,OAAO;YAChC;QACF;QAEA,iEAAiE;QACjE,MAAMO,WAAWlI,QAAQC,UAAU,CAAC,UAAUC,GAAG;QACjD,MAAMiI,aAAanI,QAAQC,UAAU,CAAC,YAAYC,GAAG,CAAC;QACtD,MAAMH,UAAUqI,cAAc,CAAC,OAAOC;gBAEdC,cA2BY3I;YA5BlC,MAAM2I,UAAU,MAAMD,YAAYlI,GAAG,CAACgI;YACtC,MAAMI,SAAS7J,QAAO4J,eAAAA,QAAQnI,GAAG,CAAC,mBAAZmI,eAAuB;YAC7CD,YAAYG,GAAG,CAACL,YAAY;gBAAEM,MAAMF,SAAS;YAAE,GAAG;gBAAEG,OAAO;YAAK;YAChEL,YAAYG,GAAG,CAACN,UAAU;gBACxBK;gBACArL,QAAQ;gBACRyL,SAAS;gBACThG;gBACAiE;gBACA,qEAAqE;gBACrE,kEAAkE;gBAClE,uEAAuE;gBACvE,mEAAmE;gBACnE,EAAE;gBACF,uEAAuE;gBACvE,oEAAoE;gBACpE,qEAAqE;gBACrE,mEAAmE;gBACnE,8CAA8C;gBAC9CgC,SAASzM,cAAc0M,4BAA4B,CACjDtE,aACAW;gBAEF4D,eAAenK,SAAS;gBACxBoK,UAAU;oBACR;wBACEC,MAAMC,KAAKC,GAAG;wBACdC,OAAO;wBACPC,QAAQ,CAAC,iBAAiB,GAAEzJ,iBAAAA,QAAQhB,KAAK,YAAbgB,iBAAiBA,QAAQW,GAAG,EAAE;oBAC5D;iBACD;gBACD+I,aAAaJ,KAAKC,GAAG;gBACrBI,WAAWlN,cAAc2D,SAAS,CAACwJ,UAAU,CAACC,eAAe;YAC/D;QACF;QAEA,0EAA0E;QAC1E,sEAAsE;QACtE,IAAIC,iBAAiB;QACrB,IAAIvE,WAAW,KAAKH,YAAY;gBAE3B;YADH0E,kBACG,QAAA,MAAMlN,uBAAuB;gBAC5ByD;gBACA0J,QAAQ3E,WAAWK,GAAG;gBACtBuE,UAAU5E,WAAW8C,KAAK,IAAI,CAAC,KAAK,EAAE9C,WAAWK,GAAG,CAAC,EAAE,CAAC;eACpDrG,MAAM6I,SAAS,GACf;gBAAElK,SAAS;oBAAE,mBAAmB,GAAGqB,MAAM6I,SAAS,CAAC,SAAS,CAAC;gBAAC;YAAE,IAChE,CAAC,eANN,QAOM;YACT,IAAI,CAAC6B,gBAAgB;gBACnB,qEAAqE;gBACrE,mEAAmE;gBACnE,oDAAoD;gBACpD,MAAMvB,SAAS0B,MAAM,GAAGC,KAAK,CAAC,IAAM9L;gBACpC,MAAMmB;gBACN,MAAMH,MAAMK,OAAO;gBACnB,OAAOrC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAA+B;YACtE;QACF;QACA,MAAM0M,SAAS,IAAIC,gBAAgB;YACjCC,MAAM;WACFlF,eAAe;YAAE,0BAA0B;QAAO,IAAI,CAAC,GACvD2E,iBAAiB;YAAE,+BAA+BA;QAAe,IAAI,CAAC;YAC1E,2BAA2BhM,OAAOwJ;YAClC,uCAAuC;YACvC,0CAA0CxJ,OAAOyJ;YACjD,iDAAiDC;WAO9ChL,cAAc8N,uBAAuB,CAAC;YACvC1I,WAAW9D,OAAO8D;YAClBmF;YACAwD,UAAUpF,eAAe,aAAa;YACtC,+DAA+D;YAC/D,kEAAkE;YAClE,2CAA2C;YAC3CqF,oBAAoB/F;YACpBgG,oBAAoBjO,cAAciO,kBAAkB,CAAChE;QACvD,IACIzH,QAAQ;YAAE0L,gBAAgB1L;QAAM,IAAI,CAAC;YACzC2L,aAAa,GAAGtI,mBAAmB,WAAW,CAAC;YAC/CuI,YAAY,GAAGvI,mBAAmB,eAAe,CAAC;YAClD,kBAAkB;YAClB,oBAAoB9D;YACpB,qBAAqBgK,SAASnH,EAAE;YAChC,uBAAuB5C;WACnBC,YAAY;YAAE,uBAAuBA;QAAU,IAAI,CAAC;YACxD,sBAAsBX,OAAOiJ;WAKzB3C,oBACA;YAAE,wBAAwBA;QAAkB,IAC5C,CAAC,GACD9E,kBAAkB;YAAE,6BAA6BA;QAAgB,IAAI,CAAC,GAGtE6F,eACA;YACE,2BAA2BrH,OACzBtB,cAAcqO,2BAA2B,CAAC;gBACxC9D;gBACAyD,oBAAoB/F;gBACpBgG,oBACEjO,cAAciO,kBAAkB,CAAChE;YACrC;YAEF,mCAAmC3I,OACjCtB,cAAciO,kBAAkB,CAAChE;QAErC,IACA,CAAC;QAEP,2EAA2E;QAC3E,oEAAoE;QACpE,yEAAyE;QACzE,oEAAoE;QACpE,iBAAiB;QACjB,IAAIA,gBAAgBtI,MAAM,GAAG,GAAG;YAC9B3B,cAAcsO,qCAAqC,CACjDX,QACAzE,aAAaK,SAAS;YAExBvJ,cAAcuO,4BAA4B,CAACZ,QAAQ1D;QACrD;QACA,MAAMuE,WAAW,MAAMC,MACrB,+CACA;YACE3N,QAAQ;YACRS,SAAS;gBACPmN,eAAe,CAAC,OAAO,EAAExN,QAAQC,GAAG,CAACC,iBAAiB,EAAE;gBACxD,gBAAgB;eAKZwB,MAAM6I,SAAS,GAAG;gBAAE,mBAAmB7I,MAAM6I,SAAS;YAAC,IAAI,CAAC;YAElE5K,MAAM8M,OAAOgB,QAAQ;QACvB;QAEF,MAAMC,UAAW,MAAMJ,SAASxN,IAAI;QAKpC,IAAI,CAACwN,SAAS7C,EAAE,IAAI,CAACiD,QAAQC,GAAG,EAAE;YAChCC,QAAQ7N,KAAK,CAAC,4BAA4B2N,QAAQ3N,KAAK;YACvD,MAAM8K,SAAS0B,MAAM,GAAGC,KAAK,CAAC,IAAM9L;YACpC,wEAAwE;YACxE,kEAAkE;YAClE,6DAA6D;YAC7D,MAAMmB;YACN,MAAMH,MAAMK,OAAO;YACnB,OAAOrC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA+B;QACtE;QACA,MAAM8K,SAASM,GAAG,CAChB;YAAE0C,mBAAmBH,QAAQhK,EAAE;YAAEoK,gBAAgBJ,QAAQC,GAAG;QAAC,GAC7D;YAAEtC,OAAO;QAAK;QAEhB,yEAAyE;QACzE,uEAAuE;QACvE,MAAM0C,UAAU;YACdC,SAASnD,SAASnH,EAAE;YACpBiK,KAAKD,QAAQC,GAAG;WACZ1I,cAAcxE,MAAM,GAAG,IAAI;YAAEwE;QAAc,IAAI,CAAC;QAEtD,MAAMvD,MAAMuM,MAAM,CAAC,KAAKF;QACxB,OAAOrO,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAACiO;IAC9B,EAAE,OAAOhO,OAAO;QACd6N,QAAQ7N,KAAK,CAACA;QACd,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM8B;QACN,OAAMH,yBAAAA,MAAOK,OAAO;QACpB,OAAOrC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;AACF,EAAC"}

package/src/lib/server/feed.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginApiHandler } from '@aglyn/aglyn/server';
+/**
+ * Google Merchant Center product feed (AGL-299): RSS 2.0 with the g:
+ * namespace over active products — one item per product (default
+ * variant pricing; per-variant feeds can come later). Submit
+ * `https://{site}/api/commerce/feed?hostId={id}` in Merchant Center.
+ */
+export declare const feedHandler: PluginApiHandler;

package/src/lib/server/feed.js

@@ -0,0 +1,59 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import * as CommerceModel from "../model/index.js";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+function escapeXml(text) {
+    return text.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+}
+/**
+ * Google Merchant Center product feed (AGL-299): RSS 2.0 with the g:
+ * namespace over active products — one item per product (default
+ * variant pricing; per-variant feeds can come later). Submit
+ * `https://{site}/api/commerce/feed?hostId={id}` in Merchant Center.
+ */ export const feedHandler = async (req, res)=>{
+    var _req_query_hostId;
+    const hostId = String((_req_query_hostId = req.query.hostId) != null ? _req_query_hostId : '');
+    if (!hostId) return res.status(400).send('Missing hostId');
+    try {
+        var _req_headers_host;
+        const firestore = firebaseAdmin.app().firestore();
+        const hostRef = firestore.collection('hosts').doc(hostId);
+        const productsSnapshot = await hostRef.collection('products').limit(500).get();
+        const requestHost = String((_req_headers_host = req.headers['host']) != null ? _req_headers_host : '');
+        const base = `https://${requestHost}`;
+        const items = productsSnapshot.docs.map((docSnapshot)=>_extends({}, CommerceModel.liftLegacyProduct(docSnapshot.data()), {
+                $id: docSnapshot.id
+            })).filter((product)=>!product.deletedAt && product.status === 'active').map((product)=>{
+            var _ref, _product_description;
+            var _product_mediaUrls;
+            const [minPrice] = CommerceModel.productPriceRange(product);
+            const inventory = CommerceModel.productInventory(product);
+            const availability = inventory != null && inventory <= 0 && product.oversellPolicy !== 'backorder' ? 'out_of_stock' : 'in_stock';
+            const image = (_ref = (_product_mediaUrls = product.mediaUrls) == null ? void 0 : _product_mediaUrls[0]) != null ? _ref : product.imageUrl;
+            return '    <item>\n' + `      <g:id>${escapeXml(product.$id)}</g:id>\n` + `      <g:title>${escapeXml(product.name)}</g:title>\n` + `      <g:description>${escapeXml((_product_description = product.description) != null ? _product_description : product.name)}</g:description>\n` + `      <g:link>${escapeXml(`${base}/products/${product.slug}`)}</g:link>\n` + (image ? `      <g:image_link>${escapeXml(image)}</g:image_link>\n` : '') + `      <g:price>${minPrice.toFixed(2)} USD</g:price>\n` + `      <g:availability>${availability}</g:availability>\n` + `      <g:condition>new</g:condition>\n` + '    </item>';
+        });
+        const xml = '<?xml version="1.0" encoding="UTF-8"?>\n' + '<rss version="2.0" xmlns:g="http://base.google.com/ns/1.0">\n' + '  <channel>\n' + `    <title>${escapeXml(requestHost)} products</title>\n` + `    <link>${escapeXml(base)}</link>\n` + '    <description>Product feed</description>\n' + items.join('\n') + '\n  </channel>\n</rss>\n';
+        res.setHeader('Content-Type', 'application/xml');
+        res.setHeader('Cache-Control', 's-maxage=3600, stale-while-revalidate');
+        return res.status(200).send(xml);
+    } catch (error) {
+        console.error(error);
+        return res.status(500).send('Feed unavailable');
+    }
+};
+
+//# sourceMappingURL=feed.js.map

package/src/lib/server/feed.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/feed.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginApiHandler } from '@aglyn/aglyn/server'\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport * as CommerceModel from '../model'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\n\nfunction escapeXml(text: string): string {\n  return text\n    .replace(/&/g, '&amp;')\n    .replace(/</g, '&lt;')\n    .replace(/>/g, '&gt;')\n    .replace(/\"/g, '&quot;')\n}\n\n/**\n * Google Merchant Center product feed (AGL-299): RSS 2.0 with the g:\n * namespace over active products — one item per product (default\n * variant pricing; per-variant feeds can come later). Submit\n * `https://{site}/api/commerce/feed?hostId={id}` in Merchant Center.\n */\nexport const feedHandler: PluginApiHandler = async (req, res) => {\n  const hostId = String(req.query.hostId ?? '')\n  if (!hostId) return res.status(400).send('Missing hostId')\n  try {\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const productsSnapshot = await hostRef\n      .collection('products')\n      .limit(500)\n      .get()\n    const requestHost = String(req.headers['host'] ?? '')\n    const base = `https://${requestHost}`\n    const items = productsSnapshot.docs\n      .map((docSnapshot) => ({\n        ...CommerceModel.liftLegacyProduct(docSnapshot.data() as any),\n        $id: docSnapshot.id,\n      }))\n      .filter(\n        (product) => !product.deletedAt && product.status === 'active',\n      )\n      .map((product) => {\n        const [minPrice] = CommerceModel.productPriceRange(product)\n        const inventory = CommerceModel.productInventory(product)\n        const availability =\n          inventory != null &&\n          inventory <= 0 &&\n          product.oversellPolicy !== 'backorder'\n            ? 'out_of_stock'\n            : 'in_stock'\n        const image = product.mediaUrls?.[0] ?? product.imageUrl\n        return (\n          '    <item>\\n' +\n          `      <g:id>${escapeXml(product.$id)}</g:id>\\n` +\n          `      <g:title>${escapeXml(product.name)}</g:title>\\n` +\n          `      <g:description>${escapeXml(product.description ?? product.name)}</g:description>\\n` +\n          `      <g:link>${escapeXml(`${base}/products/${product.slug}`)}</g:link>\\n` +\n          (image\n            ? `      <g:image_link>${escapeXml(image)}</g:image_link>\\n`\n            : '') +\n          `      <g:price>${minPrice.toFixed(2)} USD</g:price>\\n` +\n          `      <g:availability>${availability}</g:availability>\\n` +\n          `      <g:condition>new</g:condition>\\n` +\n          '    </item>'\n        )\n      })\n    const xml =\n      '<?xml version=\"1.0\" encoding=\"UTF-8\"?>\\n' +\n      '<rss version=\"2.0\" xmlns:g=\"http://base.google.com/ns/1.0\">\\n' +\n      '  <channel>\\n' +\n      `    <title>${escapeXml(requestHost)} products</title>\\n` +\n      `    <link>${escapeXml(base)}</link>\\n` +\n      '    <description>Product feed</description>\\n' +\n      items.join('\\n') +\n      '\\n  </channel>\\n</rss>\\n'\n    res.setHeader('Content-Type', 'application/xml')\n    res.setHeader('Cache-Control', 's-maxage=3600, stale-while-revalidate')\n    return res.status(200).send(xml)\n  } catch (error) {\n    console.error(error)\n    return res.status(500).send('Feed unavailable')\n  }\n}\n"],"names":["CommerceModel","firebaseAdmin","escapeXml","text","replace","feedHandler","req","res","hostId","String","query","status","send","firestore","app","hostRef","collection","doc","productsSnapshot","limit","get","requestHost","headers","base","items","docs","map","docSnapshot","liftLegacyProduct","data","$id","id","filter","product","deletedAt","minPrice","productPriceRange","inventory","productInventory","availability","oversellPolicy","image","mediaUrls","imageUrl","name","description","slug","toFixed","xml","join","setHeader","error","console"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAID,YAAYA,mBAAmB,oBAAU;AACzC,SAASC,aAAa,QAAQ,2BAA0B;AAExD,SAASC,UAAUC,IAAY;IAC7B,OAAOA,KACJC,OAAO,CAAC,MAAM,SACdA,OAAO,CAAC,MAAM,QACdA,OAAO,CAAC,MAAM,QACdA,OAAO,CAAC,MAAM;AACnB;AAEA;;;;;CAKC,GACD,OAAO,MAAMC,cAAgC,OAAOC,KAAKC;QACjCD;IAAtB,MAAME,SAASC,QAAOH,oBAAAA,IAAII,KAAK,CAACF,MAAM,YAAhBF,oBAAoB;IAC1C,IAAI,CAACE,QAAQ,OAAOD,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;IACzC,IAAI;YAOyBN;QAN3B,MAAMO,YAAYZ,cAAca,GAAG,GAAGD,SAAS;QAC/C,MAAME,UAAUF,UAAUG,UAAU,CAAC,SAASC,GAAG,CAACT;QAClD,MAAMU,mBAAmB,MAAMH,QAC5BC,UAAU,CAAC,YACXG,KAAK,CAAC,KACNC,GAAG;QACN,MAAMC,cAAcZ,QAAOH,oBAAAA,IAAIgB,OAAO,CAAC,OAAO,YAAnBhB,oBAAuB;QAClD,MAAMiB,OAAO,CAAC,QAAQ,EAAEF,aAAa;QACrC,MAAMG,QAAQN,iBAAiBO,IAAI,CAChCC,GAAG,CAAC,CAACC,cAAiB,aAClB3B,cAAc4B,iBAAiB,CAACD,YAAYE,IAAI;gBACnDC,KAAKH,YAAYI,EAAE;gBAEpBC,MAAM,CACL,CAACC,UAAY,CAACA,QAAQC,SAAS,IAAID,QAAQtB,MAAM,KAAK,UAEvDe,GAAG,CAAC,CAACO;sBAcgCA;gBALtBA;YARd,MAAM,CAACE,SAAS,GAAGnC,cAAcoC,iBAAiB,CAACH;YACnD,MAAMI,YAAYrC,cAAcsC,gBAAgB,CAACL;YACjD,MAAMM,eACJF,aAAa,QACbA,aAAa,KACbJ,QAAQO,cAAc,KAAK,cACvB,iBACA;YACN,MAAMC,iBAAQR,qBAAAA,QAAQS,SAAS,qBAAjBT,kBAAmB,CAAC,EAAE,mBAAIA,QAAQU,QAAQ;YACxD,OACE,iBACA,CAAC,YAAY,EAAEzC,UAAU+B,QAAQH,GAAG,EAAE,SAAS,CAAC,GAChD,CAAC,eAAe,EAAE5B,UAAU+B,QAAQW,IAAI,EAAE,YAAY,CAAC,GACvD,CAAC,qBAAqB,EAAE1C,WAAU+B,uBAAAA,QAAQY,WAAW,YAAnBZ,uBAAuBA,QAAQW,IAAI,EAAE,kBAAkB,CAAC,GAC1F,CAAC,cAAc,EAAE1C,UAAU,GAAGqB,KAAK,UAAU,EAAEU,QAAQa,IAAI,EAAE,EAAE,WAAW,CAAC,GAC1EL,CAAAA,QACG,CAAC,oBAAoB,EAAEvC,UAAUuC,OAAO,iBAAiB,CAAC,GAC1D,EAAC,IACL,CAAC,eAAe,EAAEN,SAASY,OAAO,CAAC,GAAG,gBAAgB,CAAC,GACvD,CAAC,sBAAsB,EAAER,aAAa,mBAAmB,CAAC,GAC1D,CAAC,sCAAsC,CAAC,GACxC;QAEJ;QACF,MAAMS,MACJ,6CACA,kEACA,kBACA,CAAC,WAAW,EAAE9C,UAAUmB,aAAa,mBAAmB,CAAC,GACzD,CAAC,UAAU,EAAEnB,UAAUqB,MAAM,SAAS,CAAC,GACvC,kDACAC,MAAMyB,IAAI,CAAC,QACX;QACF1C,IAAI2C,SAAS,CAAC,gBAAgB;QAC9B3C,IAAI2C,SAAS,CAAC,iBAAiB;QAC/B,OAAO3C,IAAII,MAAM,CAAC,KAAKC,IAAI,CAACoC;IAC9B,EAAE,OAAOG,OAAO;QACdC,QAAQD,KAAK,CAACA;QACd,OAAO5C,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;IAC9B;AACF,EAAC"}

package/src/lib/server/fulfill-order.d.ts

@@ -0,0 +1,97 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PluginApiHandler, type RecordShipmentOutcome, type RecordShipmentRequest } from '@aglyn/aglyn/server';
+/**
+ * Record a shipment — the transaction, with NO authorization of any kind
+ * (AGL-2461).
+ *
+ * This is the whole of what `fulfillOrderHandler` used to do below its auth
+ * preamble, lifted out unchanged so a SECOND caller can have it: the customer
+ * REST API's `PATCH /v1/sites/{id}/orders/{id}`, which authenticates an org
+ * API key and so shares not one line of this function's former preamble.
+ *
+ * Lifted rather than copied, and that is the entire point of the change. The
+ * console app may not import this library (the `scope:app` boundary), so the
+ * alternative on the table was a second `ORDER_TRANSITIONS` inside `/v1` —
+ * two tables that drift into the API writing a status the console forbids.
+ * One implementation, reached from the app through the core
+ * `registerOrderFulfilmentService` registry, is the fix; see that registry's
+ * docblock for why the edge runs that way.
+ *
+ * **The caller authorizes.** Everything this function knows is the transition
+ * rule. It does not know who is asking, and it will happily move any order on
+ * any host — `hostId` is taken on trust because its two callers establish
+ * trust in ways that have nothing in common (a Firebase uid in `memberRoles`
+ * for the console; an org credential that owns the host for `/v1`).
+ *
+ * Every guarantee AGL-1819 built is inside the transaction and therefore
+ * inherited by both callers: `canTransitionOrder` is re-asked under the write
+ * so a stale caller cannot skip a state, the already-in-target case returns
+ * without writing so a retry cannot append a duplicate shipment, and
+ * `lineItemIds` and the timeline are computed from the transaction's OWN read
+ * so a note landed from another tab survives.
+ */
+export declare function recordOrderShipment({ hostId, orderId, to, carrier, trackingNumber, }: RecordShipmentRequest): Promise<RecordShipmentOutcome>;
+/**
+ * Fulfil and mark-delivered, with the transition re-asked under the write
+ * (AGL-1819) — the last two order-status writes the console made with a client
+ * `updateDoc`, moved behind the same shape as `cancel-order.ts`.
+ *
+ * THE STALE-DIALOG HOLE IS THE SAME ONE AGL-1818 CLOSED FOR CANCEL.
+ * `canTransitionOrder` was consulted only to RENDER the buttons, so a dialog
+ * opened on a `paid` order that was refunded (or cancelled) in another tab
+ * could still write `fulfilled` straight onto it — `ORDER_TRANSITIONS` stayed
+ * advisory because nothing consulted it on the way IN. Re-reading the order
+ * inside the transaction that writes the status is what turns the table into
+ * a guarantee; the race comes back as a 409 naming the state that refused.
+ *
+ * ONE ROUTE FOR THE TWO FULFILMENT-SIDE TRANSITIONS, and ONLY those. They are
+ * the same act — a forward status flip plus a timeline entry, no stock moved,
+ * no money moved — so they share a handler parameterized on `to`. It refuses
+ * every other target with a 400 on purpose: `cancelled` releases stock under
+ * its own transaction (`cancel-order.ts`) and `refunded` moves money
+ * (`refund.ts`), so admitting them here would hand callers a door around
+ * exactly the specifics those routes exist to enforce.
+ *
+ * NO STOCK MOVES HERE. The sale decremented inventory when the money landed
+ * (see `cancel-order.ts`'s header); shipping the goods changes what is on the
+ * shelf not at all. An open `restockCheck` — a partial refund's question,
+ * flagged before the merchant ships the rest — survives untouched: the write
+ * is an `update()` naming only status, fulfillments and timeline, and the
+ * question is still the merchant's to answer.
+ *
+ * NO NOTIFICATION EITHER, matching the client write this replaces: the
+ * merchant fulfilled the order themselves, and `notifyHostManagers` would
+ * tell them what they just did. (`supplier-update.ts` notifies because there
+ * the SUPPLIER acted and the merchant is the one who needs to hear it.)
+ *
+ * ONCE. A retried request — a lost response, a second click — finds the order
+ * already in the target status and returns success WITHOUT writing: appending
+ * a second copy of the same fulfillment is the double this guard exists to
+ * stop. It reports `already: true` so the console can say so. A fulfil retried
+ * after the order moved on to `delivered` in another tab is a 409 instead,
+ * which is the truth: that state cannot be fulfilled (again).
+ *
+ * THE SERVER'S ORDER, NOT THE DIALOG'S: `lineItemIds` and the timeline append
+ * are computed from the transaction's own read, so a note landed from another
+ * tab survives — the client write it replaces appended to the dialog's stale
+ * copy and dropped it.
+ *
+ * Role gate: `admin` and `editor`, the role the client write already had
+ * under the rules' host catch-all — same reasoning as `cancel-order.ts`.
+ */
+export declare const fulfillOrderHandler: PluginApiHandler;

package/src/lib/server/fulfill-order.js

@@ -0,0 +1,235 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as CommerceModel from "../model/index.js";
+import { createResourceUid } from "@aglyn/aglyn/server";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+/**
+ * Record a shipment — the transaction, with NO authorization of any kind
+ * (AGL-2461).
+ *
+ * This is the whole of what `fulfillOrderHandler` used to do below its auth
+ * preamble, lifted out unchanged so a SECOND caller can have it: the customer
+ * REST API's `PATCH /v1/sites/{id}/orders/{id}`, which authenticates an org
+ * API key and so shares not one line of this function's former preamble.
+ *
+ * Lifted rather than copied, and that is the entire point of the change. The
+ * console app may not import this library (the `scope:app` boundary), so the
+ * alternative on the table was a second `ORDER_TRANSITIONS` inside `/v1` —
+ * two tables that drift into the API writing a status the console forbids.
+ * One implementation, reached from the app through the core
+ * `registerOrderFulfilmentService` registry, is the fix; see that registry's
+ * docblock for why the edge runs that way.
+ *
+ * **The caller authorizes.** Everything this function knows is the transition
+ * rule. It does not know who is asking, and it will happily move any order on
+ * any host — `hostId` is taken on trust because its two callers establish
+ * trust in ways that have nothing in common (a Firebase uid in `memberRoles`
+ * for the console; an org credential that owns the host for `/v1`).
+ *
+ * Every guarantee AGL-1819 built is inside the transaction and therefore
+ * inherited by both callers: `canTransitionOrder` is re-asked under the write
+ * so a stale caller cannot skip a state, the already-in-target case returns
+ * without writing so a retry cannot append a duplicate shipment, and
+ * `lineItemIds` and the timeline are computed from the transaction's OWN read
+ * so a note landed from another tab survives.
+ */ export async function recordOrderShipment({ hostId, orderId, to, carrier, trackingNumber }) {
+    const firestore = firebaseAdmin.app().firestore();
+    const orderRef = firestore.collection('hosts').doc(hostId).collection('orders').doc(orderId);
+    return firestore.runTransaction(async (transaction)=>{
+        var _snapshot_data, _order_fulfillments, _order_lineItems;
+        const snapshot = await transaction.get(orderRef);
+        if (!snapshot.exists) return {
+            outcome: 'no_such_order'
+        };
+        const order = CommerceModel.liftLegacyOrder((_snapshot_data = snapshot.data()) != null ? _snapshot_data : {});
+        // A redelivered click, or the second of two admins. Success because it
+        // IS the state the caller asked for — but nothing is written, so a
+        // retry cannot append a second copy of the same fulfillment.
+        if (order.status === to) return {
+            outcome: 'already'
+        };
+        if (!CommerceModel.canTransitionOrder(order.status, to)) {
+            return {
+                outcome: 'blocked',
+                from: order.status
+            };
+        }
+        const atMs = Date.now();
+        const patch = to === 'fulfilled' ? {
+            status: 'fulfilled',
+            fulfillments: [
+                ...(_order_fulfillments = order.fulfillments) != null ? _order_fulfillments : [],
+                _extends({
+                    id: createResourceUid(),
+                    lineItemIds: ((_order_lineItems = order.lineItems) != null ? _order_lineItems : []).map((_line, index)=>index)
+                }, carrier ? {
+                    carrier
+                } : {}, trackingNumber ? {
+                    trackingNumber
+                } : {}, {
+                    atMs
+                })
+            ],
+            timeline: CommerceModel.appendOrderEvent(order, 'fulfilled', trackingNumber ? `${carrier || 'Shipped'} ${trackingNumber}` : 'Fulfilled', atMs)
+        } : {
+            status: 'delivered',
+            timeline: CommerceModel.appendOrderEvent(order, 'delivered', undefined, atMs)
+        };
+        transaction.update(orderRef, patch);
+        return {
+            outcome: 'recorded'
+        };
+    });
+}
+/**
+ * Fulfil and mark-delivered, with the transition re-asked under the write
+ * (AGL-1819) — the last two order-status writes the console made with a client
+ * `updateDoc`, moved behind the same shape as `cancel-order.ts`.
+ *
+ * THE STALE-DIALOG HOLE IS THE SAME ONE AGL-1818 CLOSED FOR CANCEL.
+ * `canTransitionOrder` was consulted only to RENDER the buttons, so a dialog
+ * opened on a `paid` order that was refunded (or cancelled) in another tab
+ * could still write `fulfilled` straight onto it — `ORDER_TRANSITIONS` stayed
+ * advisory because nothing consulted it on the way IN. Re-reading the order
+ * inside the transaction that writes the status is what turns the table into
+ * a guarantee; the race comes back as a 409 naming the state that refused.
+ *
+ * ONE ROUTE FOR THE TWO FULFILMENT-SIDE TRANSITIONS, and ONLY those. They are
+ * the same act — a forward status flip plus a timeline entry, no stock moved,
+ * no money moved — so they share a handler parameterized on `to`. It refuses
+ * every other target with a 400 on purpose: `cancelled` releases stock under
+ * its own transaction (`cancel-order.ts`) and `refunded` moves money
+ * (`refund.ts`), so admitting them here would hand callers a door around
+ * exactly the specifics those routes exist to enforce.
+ *
+ * NO STOCK MOVES HERE. The sale decremented inventory when the money landed
+ * (see `cancel-order.ts`'s header); shipping the goods changes what is on the
+ * shelf not at all. An open `restockCheck` — a partial refund's question,
+ * flagged before the merchant ships the rest — survives untouched: the write
+ * is an `update()` naming only status, fulfillments and timeline, and the
+ * question is still the merchant's to answer.
+ *
+ * NO NOTIFICATION EITHER, matching the client write this replaces: the
+ * merchant fulfilled the order themselves, and `notifyHostManagers` would
+ * tell them what they just did. (`supplier-update.ts` notifies because there
+ * the SUPPLIER acted and the merchant is the one who needs to hear it.)
+ *
+ * ONCE. A retried request — a lost response, a second click — finds the order
+ * already in the target status and returns success WITHOUT writing: appending
+ * a second copy of the same fulfillment is the double this guard exists to
+ * stop. It reports `already: true` so the console can say so. A fulfil retried
+ * after the order moved on to `delivered` in another tab is a 409 instead,
+ * which is the truth: that state cannot be fulfilled (again).
+ *
+ * THE SERVER'S ORDER, NOT THE DIALOG'S: `lineItemIds` and the timeline append
+ * are computed from the transaction's own read, so a note landed from another
+ * tab survives — the client write it replaces appended to the dialog's stale
+ * copy and dropped it.
+ *
+ * Role gate: `admin` and `editor`, the role the client write already had
+ * under the rules' host catch-all — same reasoning as `cancel-order.ts`.
+ */ export const fulfillOrderHandler = async (req, res)=>{
+    var _req_headers_authorization, _req_body, _body_hostId, _body_orderId, _body_to, _body_carrier, _body_trackingNumber;
+    if (req.method !== 'POST') {
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    const authorization = String((_req_headers_authorization = req.headers.authorization) != null ? _req_headers_authorization : '');
+    const idToken = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined;
+    if (!idToken) return res.status(401).json({
+        error: 'Unauthenticated'
+    });
+    const body = typeof req.body === 'string' ? JSON.parse(req.body) : (_req_body = req.body) != null ? _req_body : {};
+    const hostId = String((_body_hostId = body.hostId) != null ? _body_hostId : '');
+    const orderId = String((_body_orderId = body.orderId) != null ? _body_orderId : '');
+    if (!hostId || !orderId) {
+        return res.status(400).json({
+            error: 'Missing hostId or orderId'
+        });
+    }
+    // Firestore reserves `__…__` ids and `.doc()` throws SYNCHRONOUSLY on one,
+    // which would surface as a 500 on a caller's typo rather than the 400 it is.
+    if (/^__.*__$/.test(hostId) || /^__.*__$/.test(orderId)) {
+        return res.status(400).json({
+            error: 'Missing hostId or orderId'
+        });
+    }
+    const to = String((_body_to = body.to) != null ? _body_to : '');
+    if (to !== 'fulfilled' && to !== 'delivered') {
+        // Deliberately NOT a generic transition endpoint — see the header.
+        return res.status(400).json({
+            error: 'to must be fulfilled or delivered'
+        });
+    }
+    const carrier = String((_body_carrier = body.carrier) != null ? _body_carrier : '').slice(0, 40);
+    const trackingNumber = String((_body_trackingNumber = body.trackingNumber) != null ? _body_trackingNumber : '').slice(0, 60);
+    try {
+        var _hostSnapshot_get;
+        const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
+        const firestore = firebaseAdmin.app().firestore();
+        const hostRef = firestore.collection('hosts').doc(hostId);
+        const hostSnapshot = await hostRef.get();
+        if (!hostSnapshot.exists) {
+            return res.status(404).json({
+                error: 'Unknown site'
+            });
+        }
+        const memberRole = ((_hostSnapshot_get = hostSnapshot.get('memberRoles')) != null ? _hostSnapshot_get : {})[decoded.uid];
+        if (memberRole !== 'admin' && memberRole !== 'editor') {
+            return res.status(403).json({
+                error: 'Not permitted'
+            });
+        }
+        // Authorized above; the shipment itself is the shared transaction. The
+        // wire shape below is unchanged — the console dialog branches on `ok`,
+        // `already` and the 409's `error` string, and this route's contract is
+        // with that dialog, not with the registry's vocabulary.
+        const outcome = await recordOrderShipment({
+            hostId,
+            orderId,
+            to,
+            carrier,
+            trackingNumber
+        });
+        if (outcome.outcome === 'no_such_order') {
+            return res.status(404).json({
+                error: 'Unknown order'
+            });
+        }
+        if (outcome.outcome === 'blocked') {
+            return res.status(409).json({
+                error: to === 'delivered' ? `Orders in "${outcome.from}" cannot be marked delivered` : `Orders in "${outcome.from}" cannot be fulfilled`
+            });
+        }
+        return res.status(200).json(outcome.outcome === 'already' ? {
+            ok: true,
+            already: true
+        } : {
+            ok: true
+        });
+    } catch (error) {
+        // Nothing landed — the transaction is all-or-nothing — so the order is
+        // still where it was and the merchant can try again.
+        console.error('fulfillOrder failed', error);
+        return res.status(500).json({
+            error: to === 'delivered' ? 'Mark delivered failed' : 'Fulfill failed'
+        });
+    }
+};
+
+//# sourceMappingURL=fulfill-order.js.map

package/src/lib/server/fulfill-order.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/fulfill-order.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as CommerceModel from '../model'\nimport {\n  createResourceUid,\n  type OrderFulfilmentTarget,\n  type PluginApiHandler,\n  type RecordShipmentOutcome,\n  type RecordShipmentRequest,\n} from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\n\n/**\n * Record a shipment — the transaction, with NO authorization of any kind\n * (AGL-2461).\n *\n * This is the whole of what `fulfillOrderHandler` used to do below its auth\n * preamble, lifted out unchanged so a SECOND caller can have it: the customer\n * REST API's `PATCH /v1/sites/{id}/orders/{id}`, which authenticates an org\n * API key and so shares not one line of this function's former preamble.\n *\n * Lifted rather than copied, and that is the entire point of the change. The\n * console app may not import this library (the `scope:app` boundary), so the\n * alternative on the table was a second `ORDER_TRANSITIONS` inside `/v1` —\n * two tables that drift into the API writing a status the console forbids.\n * One implementation, reached from the app through the core\n * `registerOrderFulfilmentService` registry, is the fix; see that registry's\n * docblock for why the edge runs that way.\n *\n * **The caller authorizes.** Everything this function knows is the transition\n * rule. It does not know who is asking, and it will happily move any order on\n * any host — `hostId` is taken on trust because its two callers establish\n * trust in ways that have nothing in common (a Firebase uid in `memberRoles`\n * for the console; an org credential that owns the host for `/v1`).\n *\n * Every guarantee AGL-1819 built is inside the transaction and therefore\n * inherited by both callers: `canTransitionOrder` is re-asked under the write\n * so a stale caller cannot skip a state, the already-in-target case returns\n * without writing so a retry cannot append a duplicate shipment, and\n * `lineItemIds` and the timeline are computed from the transaction's OWN read\n * so a note landed from another tab survives.\n */\nexport async function recordOrderShipment({\n  hostId,\n  orderId,\n  to,\n  carrier,\n  trackingNumber,\n}: RecordShipmentRequest): Promise<RecordShipmentOutcome> {\n  const firestore = firebaseAdmin.app().firestore()\n  const orderRef = firestore\n    .collection('hosts')\n    .doc(hostId)\n    .collection('orders')\n    .doc(orderId)\n\n  return firestore.runTransaction(\n    async (transaction): Promise<RecordShipmentOutcome> => {\n      const snapshot = await transaction.get(orderRef)\n      if (!snapshot.exists) return { outcome: 'no_such_order' }\n      const order = CommerceModel.liftLegacyOrder(\n        (snapshot.data() ?? {}) as never,\n      )\n      // A redelivered click, or the second of two admins. Success because it\n      // IS the state the caller asked for — but nothing is written, so a\n      // retry cannot append a second copy of the same fulfillment.\n      if (order.status === to) return { outcome: 'already' }\n      if (!CommerceModel.canTransitionOrder(order.status, to)) {\n        return { outcome: 'blocked', from: order.status }\n      }\n\n      const atMs = Date.now()\n      const patch: Record<string, unknown> =\n        to === 'fulfilled'\n          ? {\n              status: 'fulfilled',\n              fulfillments: [\n                ...(order.fulfillments ?? []),\n                {\n                  id: createResourceUid(),\n                  lineItemIds: (order.lineItems ?? []).map(\n                    (_line, index) => index,\n                  ),\n                  ...(carrier ? { carrier } : {}),\n                  ...(trackingNumber ? { trackingNumber } : {}),\n                  atMs,\n                } satisfies CommerceModel.OrderFulfillment,\n              ],\n              timeline: CommerceModel.appendOrderEvent(\n                order,\n                'fulfilled',\n                trackingNumber\n                  ? `${carrier || 'Shipped'} ${trackingNumber}`\n                  : 'Fulfilled',\n                atMs,\n              ),\n            }\n          : {\n              status: 'delivered',\n              timeline: CommerceModel.appendOrderEvent(\n                order,\n                'delivered',\n                undefined,\n                atMs,\n              ),\n            }\n      transaction.update(orderRef, patch)\n      return { outcome: 'recorded' }\n    },\n  )\n}\n\n/**\n * Fulfil and mark-delivered, with the transition re-asked under the write\n * (AGL-1819) — the last two order-status writes the console made with a client\n * `updateDoc`, moved behind the same shape as `cancel-order.ts`.\n *\n * THE STALE-DIALOG HOLE IS THE SAME ONE AGL-1818 CLOSED FOR CANCEL.\n * `canTransitionOrder` was consulted only to RENDER the buttons, so a dialog\n * opened on a `paid` order that was refunded (or cancelled) in another tab\n * could still write `fulfilled` straight onto it — `ORDER_TRANSITIONS` stayed\n * advisory because nothing consulted it on the way IN. Re-reading the order\n * inside the transaction that writes the status is what turns the table into\n * a guarantee; the race comes back as a 409 naming the state that refused.\n *\n * ONE ROUTE FOR THE TWO FULFILMENT-SIDE TRANSITIONS, and ONLY those. They are\n * the same act — a forward status flip plus a timeline entry, no stock moved,\n * no money moved — so they share a handler parameterized on `to`. It refuses\n * every other target with a 400 on purpose: `cancelled` releases stock under\n * its own transaction (`cancel-order.ts`) and `refunded` moves money\n * (`refund.ts`), so admitting them here would hand callers a door around\n * exactly the specifics those routes exist to enforce.\n *\n * NO STOCK MOVES HERE. The sale decremented inventory when the money landed\n * (see `cancel-order.ts`'s header); shipping the goods changes what is on the\n * shelf not at all. An open `restockCheck` — a partial refund's question,\n * flagged before the merchant ships the rest — survives untouched: the write\n * is an `update()` naming only status, fulfillments and timeline, and the\n * question is still the merchant's to answer.\n *\n * NO NOTIFICATION EITHER, matching the client write this replaces: the\n * merchant fulfilled the order themselves, and `notifyHostManagers` would\n * tell them what they just did. (`supplier-update.ts` notifies because there\n * the SUPPLIER acted and the merchant is the one who needs to hear it.)\n *\n * ONCE. A retried request — a lost response, a second click — finds the order\n * already in the target status and returns success WITHOUT writing: appending\n * a second copy of the same fulfillment is the double this guard exists to\n * stop. It reports `already: true` so the console can say so. A fulfil retried\n * after the order moved on to `delivered` in another tab is a 409 instead,\n * which is the truth: that state cannot be fulfilled (again).\n *\n * THE SERVER'S ORDER, NOT THE DIALOG'S: `lineItemIds` and the timeline append\n * are computed from the transaction's own read, so a note landed from another\n * tab survives — the client write it replaces appended to the dialog's stale\n * copy and dropped it.\n *\n * Role gate: `admin` and `editor`, the role the client write already had\n * under the rules' host catch-all — same reasoning as `cancel-order.ts`.\n */\nexport const fulfillOrderHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n  const body =\n    typeof req.body === 'string' ? JSON.parse(req.body) : (req.body ?? {})\n  const hostId = String(body.hostId ?? '')\n  const orderId = String(body.orderId ?? '')\n  if (!hostId || !orderId) {\n    return res.status(400).json({ error: 'Missing hostId or orderId' })\n  }\n  // Firestore reserves `__…__` ids and `.doc()` throws SYNCHRONOUSLY on one,\n  // which would surface as a 500 on a caller's typo rather than the 400 it is.\n  if (/^__.*__$/.test(hostId) || /^__.*__$/.test(orderId)) {\n    return res.status(400).json({ error: 'Missing hostId or orderId' })\n  }\n  const to = String(body.to ?? '') as OrderFulfilmentTarget\n  if (to !== 'fulfilled' && to !== 'delivered') {\n    // Deliberately NOT a generic transition endpoint — see the header.\n    return res.status(400).json({ error: 'to must be fulfilled or delivered' })\n  }\n  const carrier = String(body.carrier ?? '').slice(0, 40)\n  const trackingNumber = String(body.trackingNumber ?? '').slice(0, 60)\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown site' })\n    }\n    const memberRole = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n    if (memberRole !== 'admin' && memberRole !== 'editor') {\n      return res.status(403).json({ error: 'Not permitted' })\n    }\n\n    // Authorized above; the shipment itself is the shared transaction. The\n    // wire shape below is unchanged — the console dialog branches on `ok`,\n    // `already` and the 409's `error` string, and this route's contract is\n    // with that dialog, not with the registry's vocabulary.\n    const outcome = await recordOrderShipment({\n      hostId,\n      orderId,\n      to,\n      carrier,\n      trackingNumber,\n    })\n    if (outcome.outcome === 'no_such_order') {\n      return res.status(404).json({ error: 'Unknown order' })\n    }\n    if (outcome.outcome === 'blocked') {\n      return res.status(409).json({\n        error:\n          to === 'delivered'\n            ? `Orders in \"${outcome.from}\" cannot be marked delivered`\n            : `Orders in \"${outcome.from}\" cannot be fulfilled`,\n      })\n    }\n    return res\n      .status(200)\n      .json(\n        outcome.outcome === 'already' ? { ok: true, already: true } : { ok: true },\n      )\n  } catch (error) {\n    // Nothing landed — the transaction is all-or-nothing — so the order is\n    // still where it was and the merchant can try again.\n    console.error('fulfillOrder failed', error)\n    return res.status(500).json({\n      error: to === 'delivered' ? 'Mark delivered failed' : 'Fulfill failed',\n    })\n  }\n}\n"],"names":["CommerceModel","createResourceUid","firebaseAdmin","recordOrderShipment","hostId","orderId","to","carrier","trackingNumber","firestore","app","orderRef","collection","doc","runTransaction","transaction","snapshot","order","get","exists","outcome","liftLegacyOrder","data","status","canTransitionOrder","from","atMs","Date","now","patch","fulfillments","id","lineItemIds","lineItems","map","_line","index","timeline","appendOrderEvent","undefined","update","fulfillOrderHandler","req","res","body","method","json","error","authorization","String","headers","idToken","startsWith","slice","length","JSON","parse","test","hostSnapshot","decoded","auth","verifyIdToken","hostRef","memberRole","uid","ok","already","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,mBAAmB,oBAAU;AACzC,SACEC,iBAAiB,QAKZ,sBAAqB;AAC5B,SAASC,aAAa,QAAQ,2BAA0B;AAExD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BC,GACD,OAAO,eAAeC,oBAAoB,EACxCC,MAAM,EACNC,OAAO,EACPC,EAAE,EACFC,OAAO,EACPC,cAAc,EACQ;IACtB,MAAMC,YAAYP,cAAcQ,GAAG,GAAGD,SAAS;IAC/C,MAAME,WAAWF,UACdG,UAAU,CAAC,SACXC,GAAG,CAACT,QACJQ,UAAU,CAAC,UACXC,GAAG,CAACR;IAEP,OAAOI,UAAUK,cAAc,CAC7B,OAAOC;YAIFC,gBAgBWC,qBAGYA;QAtB1B,MAAMD,WAAW,MAAMD,YAAYG,GAAG,CAACP;QACvC,IAAI,CAACK,SAASG,MAAM,EAAE,OAAO;YAAEC,SAAS;QAAgB;QACxD,MAAMH,QAAQjB,cAAcqB,eAAe,EACxCL,iBAAAA,SAASM,IAAI,cAAbN,iBAAmB,CAAC;QAEvB,uEAAuE;QACvE,mEAAmE;QACnE,6DAA6D;QAC7D,IAAIC,MAAMM,MAAM,KAAKjB,IAAI,OAAO;YAAEc,SAAS;QAAU;QACrD,IAAI,CAACpB,cAAcwB,kBAAkB,CAACP,MAAMM,MAAM,EAAEjB,KAAK;YACvD,OAAO;gBAAEc,SAAS;gBAAWK,MAAMR,MAAMM,MAAM;YAAC;QAClD;QAEA,MAAMG,OAAOC,KAAKC,GAAG;QACrB,MAAMC,QACJvB,OAAO,cACH;YACEiB,QAAQ;YACRO,cAAc;oBACRb,sBAAAA,MAAMa,YAAY,YAAlBb,sBAAsB,EAAE;gBAC5B;oBACEc,IAAI9B;oBACJ+B,aAAa,EAACf,mBAAAA,MAAMgB,SAAS,YAAfhB,mBAAmB,EAAE,EAAEiB,GAAG,CACtC,CAACC,OAAOC,QAAUA;mBAEhB7B,UAAU;oBAAEA;gBAAQ,IAAI,CAAC,GACzBC,iBAAiB;oBAAEA;gBAAe,IAAI,CAAC;oBAC3CkB;;aAEH;YACDW,UAAUrC,cAAcsC,gBAAgB,CACtCrB,OACA,aACAT,iBACI,GAAGD,WAAW,UAAU,CAAC,EAAEC,gBAAgB,GAC3C,aACJkB;QAEJ,IACA;YACEH,QAAQ;YACRc,UAAUrC,cAAcsC,gBAAgB,CACtCrB,OACA,aACAsB,WACAb;QAEJ;QACNX,YAAYyB,MAAM,CAAC7B,UAAUkB;QAC7B,OAAO;YAAET,SAAS;QAAW;IAC/B;AAEJ;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+CC,GACD,OAAO,MAAMqB,sBAAwC,OAAOC,KAAKC;QAIlCD,4BAM4BA,WACnCE,cACCA,eASLA,UAKKA,eACOA;IA1B9B,IAAIF,IAAIG,MAAM,KAAK,QAAQ;QACzB,OAAOF,IAAIpB,MAAM,CAAC,KAAKuB,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,gBAAgBC,QAAOP,6BAAAA,IAAIQ,OAAO,CAACF,aAAa,YAAzBN,6BAA6B;IAC1D,MAAMS,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUC,MAAM,IACpCf;IACJ,IAAI,CAACY,SAAS,OAAOR,IAAIpB,MAAM,CAAC,KAAKuB,IAAI,CAAC;QAAEC,OAAO;IAAkB;IACrE,MAAMH,OACJ,OAAOF,IAAIE,IAAI,KAAK,WAAWW,KAAKC,KAAK,CAACd,IAAIE,IAAI,KAAKF,YAAAA,IAAIE,IAAI,YAARF,YAAY,CAAC;IACtE,MAAMtC,SAAS6C,QAAOL,eAAAA,KAAKxC,MAAM,YAAXwC,eAAe;IACrC,MAAMvC,UAAU4C,QAAOL,gBAAAA,KAAKvC,OAAO,YAAZuC,gBAAgB;IACvC,IAAI,CAACxC,UAAU,CAACC,SAAS;QACvB,OAAOsC,IAAIpB,MAAM,CAAC,KAAKuB,IAAI,CAAC;YAAEC,OAAO;QAA4B;IACnE;IACA,2EAA2E;IAC3E,6EAA6E;IAC7E,IAAI,WAAWU,IAAI,CAACrD,WAAW,WAAWqD,IAAI,CAACpD,UAAU;QACvD,OAAOsC,IAAIpB,MAAM,CAAC,KAAKuB,IAAI,CAAC;YAAEC,OAAO;QAA4B;IACnE;IACA,MAAMzC,KAAK2C,QAAOL,WAAAA,KAAKtC,EAAE,YAAPsC,WAAW;IAC7B,IAAItC,OAAO,eAAeA,OAAO,aAAa;QAC5C,mEAAmE;QACnE,OAAOqC,IAAIpB,MAAM,CAAC,KAAKuB,IAAI,CAAC;YAAEC,OAAO;QAAoC;IAC3E;IACA,MAAMxC,UAAU0C,QAAOL,gBAAAA,KAAKrC,OAAO,YAAZqC,gBAAgB,IAAIS,KAAK,CAAC,GAAG;IACpD,MAAM7C,iBAAiByC,QAAOL,uBAAAA,KAAKpC,cAAc,YAAnBoC,uBAAuB,IAAIS,KAAK,CAAC,GAAG;IAElE,IAAI;YAQkBK;QAPpB,MAAMC,UAAU,MAAMzD,cAAcQ,GAAG,GAAGkD,IAAI,GAAGC,aAAa,CAACV;QAC/D,MAAM1C,YAAYP,cAAcQ,GAAG,GAAGD,SAAS;QAC/C,MAAMqD,UAAUrD,UAAUG,UAAU,CAAC,SAASC,GAAG,CAACT;QAClD,MAAMsD,eAAe,MAAMI,QAAQ5C,GAAG;QACtC,IAAI,CAACwC,aAAavC,MAAM,EAAE;YACxB,OAAOwB,IAAIpB,MAAM,CAAC,KAAKuB,IAAI,CAAC;gBAAEC,OAAO;YAAe;QACtD;QACA,MAAMgB,aAAa,EAACL,oBAAAA,aAAaxC,GAAG,CAAC,0BAAjBwC,oBAAmC,CAAC,EAAE,CAACC,QAAQK,GAAG,CAAC;QACvE,IAAID,eAAe,WAAWA,eAAe,UAAU;YACrD,OAAOpB,IAAIpB,MAAM,CAAC,KAAKuB,IAAI,CAAC;gBAAEC,OAAO;YAAgB;QACvD;QAEA,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,wDAAwD;QACxD,MAAM3B,UAAU,MAAMjB,oBAAoB;YACxCC;YACAC;YACAC;YACAC;YACAC;QACF;QACA,IAAIY,QAAQA,OAAO,KAAK,iBAAiB;YACvC,OAAOuB,IAAIpB,MAAM,CAAC,KAAKuB,IAAI,CAAC;gBAAEC,OAAO;YAAgB;QACvD;QACA,IAAI3B,QAAQA,OAAO,KAAK,WAAW;YACjC,OAAOuB,IAAIpB,MAAM,CAAC,KAAKuB,IAAI,CAAC;gBAC1BC,OACEzC,OAAO,cACH,CAAC,WAAW,EAAEc,QAAQK,IAAI,CAAC,4BAA4B,CAAC,GACxD,CAAC,WAAW,EAAEL,QAAQK,IAAI,CAAC,qBAAqB,CAAC;YACzD;QACF;QACA,OAAOkB,IACJpB,MAAM,CAAC,KACPuB,IAAI,CACH1B,QAAQA,OAAO,KAAK,YAAY;YAAE6C,IAAI;YAAMC,SAAS;QAAK,IAAI;YAAED,IAAI;QAAK;IAE/E,EAAE,OAAOlB,OAAO;QACd,uEAAuE;QACvE,qDAAqD;QACrDoB,QAAQpB,KAAK,CAAC,uBAAuBA;QACrC,OAAOJ,IAAIpB,MAAM,CAAC,KAAKuB,IAAI,CAAC;YAC1BC,OAAOzC,OAAO,cAAc,0BAA0B;QACxD;IACF;AACF,EAAC"}